chore(nix-actions): Update and take advantage of the new stuff

workflows/eval-nodes.nix

@@ -2,7 +2,7 @@
 #
 # SPDX-License-Identifier: EUPL-1.2
 
-{ lib }:
+{ lib, nix-actions }:
 
 let
   inherit (lib) attrNames genAttrs;
@@ -27,7 +27,7 @@ in
         env = {
           STORE_ENDPOINT = "https://tvix-store.dgnum.eu/infra-signing/";
           STORE_USER = "admin";
-          STORE_PASSWORD = "\${{ secrets.STORE_PASSWORD }}";
+          STORE_PASSWORD = nix-actions.lib.secret "STORE_PASSWORD";
           BUILD_NODE = node;
         };
       }

workflows/eval-shell.nix

@@ -2,6 +2,8 @@
 #
 # SPDX-License-Identifier: EUPL-1.2
 
+{ nix-actions, ... }:
+
 {
   name = "Build the shell";
   on = {
@@ -20,7 +22,7 @@
           env = {
             STORE_ENDPOINT = "https://tvix-store.dgnum.eu/infra-signing/";
             STORE_USER = "admin";
-            STORE_PASSWORD = "\${{ secrets.STORE_PASSWORD }}";
+            STORE_PASSWORD = nix-actions.lib.secret "STORE_PASSWORD";
           };
         }
       ];

workflows/npins-update.nix

@@ -2,58 +2,62 @@
 #
 # SPDX-License-Identifier: EUPL-1.2
 
+{ nix-actions, ... }:
+
 {
   name = "npins update";
   on.schedule = [
-    # Run at 11 o'clock every wednesday
+    # Run at 15:25 everyday
     { cron = "25 15 * * *"; }
   ];
 
   jobs.npins_update = {
     runs-on = "nix";
     steps = [
-      {
-        uses = "actions/checkout@v3";
-        "with" = {
-          depth = 0;
-          token = "\${{ secrets.TEA_DGNUM_CHORES_TOKEN }}";
-        };
-      }
+      (nix-actions.steps.checkout {
+        fetch-depth = 0;
+        token = nix-actions.lib.secret "TEA_DGNUM_CHORES_TOKEN";
+      })
 
       {
         name = "Update dependencies and open PR if necessary";
-        run = ''
-          npins update
+        run = # bash
+          ''
+            npins update
 
-          if [ ! -z "$(git diff --name-only)" ]; then
-            echo "[+] Changes detected, pushing updates."
+            if [ ! -z "$(git diff --name-only)" ]; then
+              echo "[+] Changes detected, pushing updates."
 
-            git switch -C npins-update
+              git switch -C npins-update
 
-            git add npins
+              git add npins
 
-            git config user.name "DGNum Chores"
-            git config user.email "tech@dgnum.eu"
+              git commit --message "chore(npins): Update"
+              git push --set-upstream origin npins-update --force
 
-            git commit --message "chore(npins): Update"
-            git push --set-upstream origin npins-update --force
+              # Connect to the server with the cli
+              tea login add \
+                -n dgnum-chores \
+                -t "${nix-actions.lib.secret "TEA_DGNUM_CHORES_TOKEN"}" \
+                -u https://git.dgnum.eu
 
-            # Connect to the server with the cli
-            tea login add \
-              -n dgnum-chores \
-              -t "''${{ secrets.TEA_DGNUM_CHORES_TOKEN }}" \
-              -u https://git.dgnum.eu
-
-            # Create a pull request if needed
-            # i.e. no PR with the same title exists
-            if [ -z "$(tea pr ls -f='title,author' -o simple | grep 'chore(npins): Update dgnum-chores')" ]; then
-              tea pr create \
-                --description "Automatic npins update" \
-                --title "chore(npins): Update" \
-                --head npins-update
+              # Create a pull request if needed
+              # i.e. no PR with the same title exists
+              if [ -z "$(tea pr ls -f='title,author' -o simple | grep 'chore(npins): Update dgnum-chores')" ]; then
+                tea pr create \
+                  --description "Automatic npins update" \
+                  --title "chore(npins): Update" \
+                  --head npins-update
+              fi
             fi
-          fi
-        '';
+          '';
+
+        env = {
+          GIT_AUTHOR_NAME = "DGNum Chores";
+          GIT_AUTHOR_EMAIL = "tech@dgnum.eu";
+          GIT_COMMITTER_NAME = "DGNum Chores";
+          GIT_COMMITTER_EMAIL = "tech@dgnum.eu";
+        };
       }
     ];
   };