News for hackers. Stuff that matters.

A comment on The Magic Nix Cache, a GitHub Action for speeding up your Nix workflows. Parent comment

Re:The Magic Nix Cache, a GitHub Action for speeding up your... by grhmc on Monday June 26, 2023 @07:09PM (#36487055)
Yep, that works great for cases where you trust all your contributors. We do the same for some projects internally, too. However, for public projects where you don't it gets a bit ... dicier. Glad to hear that's working for you!
[ Parent | on HN ]
Re:The Magic Nix Cache, a GitHub Action for speeding up your... by dlahoda on Tuesday June 27, 2023 @03:37AM (#36489974)
we have public oss project. i guess we were not attacked yet.

prs from forks run only main workflows, and these run nix which is kind of isolated enough.

i guess one could attack with some infinite nix store bomb.

[ Parent | on HN ]