Copy Nix flake setup from RustShop

.github/workflows/ci-nix.yml

@@ -0,0 +1,52 @@
+# This is a basic workflow to help you get started with Actions
+
+name: "CI (nix)"
+
+# Controls when the workflow will run
+on:
+  # Triggers the workflow on push or pull request events but only for the "main" branch
+  push:
+    branches: [ "main", "master" ]
+  pull_request:
+    branches: [ "main", "master" ]
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  # This workflow contains a single job called "build"
+  lint:
+    name: "Lint"
+    runs-on: ubuntu-latest
+
+    steps:
+      # Checks-out repository under $GITHUB_WORKSPACE
+      - uses: actions/checkout@v3
+
+      - name: Cache install Nix packages
+        uses: mtoohey31/cache-flake-attrs@v2
+        with:
+          key: ${{ runner.os }}-nix-${{ hashFiles('./flake.lock', './flake.nix') }}-lint
+          flake_paths: ".#devShells.x86_64-linux.lint"
+
+      # run the same check that git `pre-commit` hook would, just in case
+      - name: Commit check
+        run: nix develop --ignore-environment --extra-experimental-features nix-command --extra-experimental-features flakes .#lint --command ./misc/git-hooks/pre-commit
+
+
+  build:
+    name: "Build"
+    runs-on: ubuntu-latest
+    steps:
+      # Checks-out repository under $GITHUB_WORKSPACE
+      - uses: actions/checkout@v3
+
+      - name: Cache install Nix packages
+        uses: mtoohey31/cache-flake-attrs@v2
+        with:
+          key: ${{ runner.os }}-nix-${{ hashFiles('./flake.lock', './flake.nix', './Cargo.lock') }}-deps
+          flake_paths: ".#deps"
+
+      - name: Run tests
+        run: nix build -L --extra-experimental-features nix-command --extra-experimental-features flakes .#ci

cargo-crev/src/repo.rs

@@ -596,7 +596,10 @@ impl Repo {
         let dependency_request =
             Dependency::parse(name, version_str.as_deref(), source.source_id())?;
         let _lock = self.config.acquire_package_cache_lock()?;
-        if !source.query(&dependency_request, &mut |summary| summaries.push(summary)).is_ready() {
+        if !source
+            .query(&dependency_request, &mut |summary| summaries.push(summary))
+            .is_ready()
+        {
             source.block_until_ready()?;
         }
         let summary = if let Some(version) = version {

ci/prep_deploy.sh

@@ -10,5 +10,5 @@ cp cargo-crev/README.md LICENSE* "$name/"
 tar czvf "$name.tar.gz" "$name"
 
 # Get the sha-256 checksum w/o filename and newline
-echo -n $(shasum -ba 256 "$name.tar.gz" | cut -d " " -f 1) > "$name.tar.gz.sha256"
+echo -n "$(shasum -ba 256 "$name.tar.gz" | cut -d " " -f 1)" > "$name.tar.gz.sha256"
 

crev-wot/src/trust_set.rs

@@ -214,7 +214,8 @@ impl TrustSet {
                     .unwrap_or_else(HashSet::new);
 
                 let too_far = candidate_total_distance.map(|d| params.max_distance < d);
-                let trust_too_low = too_far.unwrap_or(true) && effective_trust_level == TrustLevel::None;
+                let trust_too_low =
+                    too_far.unwrap_or(true) && effective_trust_level == TrustLevel::None;
 
                 let overriden_by = if let Some(existing_override) = current_trust_set
                     .trust_ignore_overrides