Mohamed Boudra 29277c900d ci: split nix workflow into build (anywhere) + update-hash (main only) ...

build runs on push to main and every PR including forks. Same model as
the test/lint/typecheck workflows: read-only token, no secrets injected,
runs scripts/update-nix.sh + nix build to validate. No commit, no push.

update-hash runs only on push to main. Mints the paseo-ai App token,
re-runs the update + build, and commits the refreshed hash via the
ruleset bypass. The default GITHUB_TOKEN no longer pushes anywhere.

Rename file to nix.yml since it's no longer just a build job.

2026-05-12 12:54:22 +07:00

..

ISSUE_TEMPLATE

chore: issue forms, PR template, contributor guidance (#864)

2026-05-10 12:32:22 +08:00

workflows

ci: split nix workflow into build (anywhere) + update-hash (main only)

2026-05-12 12:54:22 +07:00

FUNDING.yml

Create FUNDING.yml

2026-03-30 17:29:31 +08:00

PULL_REQUEST_TEMPLATE.md

chore: issue forms, PR template, contributor guidance (#864)

2026-05-10 12:32:22 +08:00