ci(shared): bump vendored ci files (#565)

Co-authored-by: CI Bot <bot@galoy.io>

ci/vendir.lock.yml

@@ -2,14 +2,14 @@ apiVersion: vendir.k14s.io/v1alpha1
 directories:
 - contents:
   - git:
-      commitTitle: 'fix: remove nix command from check-code (#55)'
-      sha: e186c637e85c89d59f52c3a7ac5a3f23b25b5331
+      commitTitle: 'fix: check-code executable'
+      sha: cfd07211efb7ef9c986020d1d24069c820fd1717
     path: .
   path: ../.github/workflows/vendor
 - contents:
   - git:
-      commitTitle: 'fix: remove nix command from check-code (#55)'
-      sha: e186c637e85c89d59f52c3a7ac5a3f23b25b5331
+      commitTitle: 'fix: check-code executable'
+      sha: cfd07211efb7ef9c986020d1d24069c820fd1717
     path: .
   path: vendor
 kind: LockConfig

ci/vendir.yml

@@ -8,7 +8,7 @@ directories:
   - path: . # Copy this folder out to ..
     git:
       url: https://github.com/GaloyMoney/concourse-shared.git
-      ref: e186c637e85c89d59f52c3a7ac5a3f23b25b5331
+      ref: cfd07211efb7ef9c986020d1d24069c820fd1717
     includePaths:
     - shared/actions/*
     excludePaths:
@@ -20,7 +20,7 @@ directories:
   - path: .
     git:
       url: https://github.com/GaloyMoney/concourse-shared.git
-      ref: e186c637e85c89d59f52c3a7ac5a3f23b25b5331
+      ref: cfd07211efb7ef9c986020d1d24069c820fd1717
     includePaths:
     - shared/ci/**/*
     excludePaths:

ci/vendor/pipeline-fragments.lib.yml

@@ -44,6 +44,12 @@ source:
   repository: #@ release_concourse_image()
 #@ end
 
+#@ def nix_task_image_config():
+type: registry-image
+source:
+  repository: nixpkgs/nix-flakes
+#@ end
+
 #@ def slack_failure_notification():
 #@ fail_url = "<$ATC_EXTERNAL_URL/teams/$BUILD_TEAM_NAME/pipelines/$BUILD_PIPELINE_NAME/jobs/$BUILD_JOB_NAME/builds/$BUILD_NAME| :face_with_symbols_on_mouth: $BUILD_JOB_NAME> failed!"
 put: slack
@@ -54,6 +60,25 @@ params:
   text:    #@ fail_url
 #@ end
 
+#@ def check_code():
+name: check-code
+serial: true
+plan:
+- in_parallel:
+  - { get: repo, trigger: true }
+  - { get: pipeline-tasks }
+- task: check-code
+  config:
+    platform: linux
+    image_resource: #@ nix_task_image_config()
+    inputs:
+    - name: pipeline-tasks
+    - name: repo
+    run:
+      path: pipeline-tasks/ci/vendor/tasks/check-code.sh
+on_failure: #@ slack_failure_notification()
+#@ end
+
 #@ def nodejs_check_code():
 name: check-code
 serial: true

ci/vendor/tasks/check-code.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+#! Auto synced from Shared CI Resources repository
+#! Don't change this file, instead change it in github.com/GaloyMoney/concourse-shared
+
+set -eu
+
+pushd repo
+
+nix develop -c make check-code