From dfb3a03ef8e5dbad2f517a2fc674bfce15579b45 Mon Sep 17 00:00:00 2001 From: Robin Quintero Date: Fri, 22 Sep 2023 16:36:21 -0500 Subject: [PATCH] feat(build): #979 fix git config error - fix git config safe.directory error Signed-off-by: Robin Quintero --- .github/workflows/prod.yml | 126 +++++++++++++------------------------ 1 file changed, 42 insertions(+), 84 deletions(-) diff --git a/.github/workflows/prod.yml b/.github/workflows/prod.yml index ad21bfed..75519af3 100644 --- a/.github/workflows/prod.yml +++ b/.github/workflows/prod.yml @@ -15,8 +15,7 @@ jobs: GITHUB_ACTOR: ${{ github.actor }} GITHUB_TOKEN: ${{ github.token }} with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /deployContainerImage/makesLatestAmd64" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /deployContainerImage/makesLatestAmd64" deployContainerImage_makesLatestArm64: if: ${{ github.repository == 'fluidattacks/makes' }} runs-on: buildjet-2vcpu-ubuntu-2204-arm @@ -30,8 +29,7 @@ jobs: GITHUB_ACTOR: ${{ github.actor }} GITHUB_TOKEN: ${{ github.token }} with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /deployContainerImage/makesLatestArm64" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /deployContainerImage/makesLatestArm64" deployContainerImage_makesPinnedAmd64: if: ${{ github.repository == 'fluidattacks/makes' }} runs-on: ubuntu-latest @@ -45,8 +43,7 @@ jobs: GITHUB_ACTOR: ${{ github.actor }} GITHUB_TOKEN: ${{ github.token }} with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /deployContainerImage/makesPinnedAmd64" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /deployContainerImage/makesPinnedAmd64" deployContainerImage_makesPinnedArm64: if: ${{ github.repository == 'fluidattacks/makes' }} runs-on: buildjet-2vcpu-ubuntu-2204-arm @@ -60,8 +57,7 @@ jobs: GITHUB_ACTOR: ${{ github.actor }} GITHUB_TOKEN: ${{ github.token }} with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /deployContainerImage/makesPinnedArm64" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /deployContainerImage/makesPinnedArm64" releaseGitHub: if: ${{ github.repository == 'fluidattacks/makes' }} runs-on: ubuntu-latest @@ -98,8 +94,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: __all__ with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . __all__" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . __all__" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} mac_all: @@ -122,8 +117,7 @@ jobs: GITHUB_TOKEN: ${{ github.token }} CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /calculateScorecard" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /calculateScorecard" macos_calculatescorecard: runs-on: macos-latest steps: @@ -142,8 +136,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /deployTerraform/module with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /deployTerraform/module" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /deployTerraform/module" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_deployTerraform_module: @@ -163,8 +156,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /dev/cliMain with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /dev/cliMain" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /dev/cliMain" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_dev_cliMain: @@ -184,8 +176,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /dev/example with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /dev/example" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /dev/example" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_dev_example: @@ -205,8 +196,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /docs/deploy with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /docs/deploy prod" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /docs/deploy prod" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} @@ -217,8 +207,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /envVars/example with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /envVars/example" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /envVars/example" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_envVars_example: @@ -238,8 +227,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /formatBash with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /formatBash" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /formatBash" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_formatBash: @@ -259,8 +247,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /formatNix with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /formatNix" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /formatNix" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_formatNix: @@ -280,8 +267,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /formatPython with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /formatPython" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /formatPython" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_formatPython: @@ -301,8 +287,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /formatTerraform with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /formatTerraform" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /formatTerraform" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_formatTerraform: @@ -322,8 +307,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /formatYaml with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /formatYaml" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /formatYaml" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_formatYaml: @@ -343,8 +327,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /helloWorld with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /helloWorld" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /helloWorld" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_helloWorld: @@ -364,8 +347,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintBash with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintBash" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintBash" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintBash: @@ -385,8 +367,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintClojure/test with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintClojure/test" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintClojure/test" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintClojure_test: @@ -408,8 +389,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintGitCommitMsg with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintGitCommitMsg" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintGitCommitMsg" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} @@ -422,8 +402,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintGitMailMap with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintGitMailMap" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintGitMailMap" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintGitMailMap: @@ -443,8 +422,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintMarkdown/all with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintMarkdown/all" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintMarkdown/all" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintMarkdown_all: @@ -464,8 +442,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintNix with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintNix" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintNix" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintNix: @@ -485,8 +462,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintPython/dirOfModules/makes with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintPython/dirOfModules/makes" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintPython/dirOfModules/makes" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintPython_dirOfModules_makes: @@ -506,8 +482,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintPython/dirOfModules/makes/main with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintPython/dirOfModules/makes/main" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintPython/dirOfModules/makes/main" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintPython_dirOfModules_makes_main: @@ -527,8 +502,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintPython/imports/makes with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintPython/imports/makes" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintPython/imports/makes" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintPython_imports_makes: @@ -548,8 +522,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintPython/module/cliMain with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintPython/module/cliMain" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintPython/module/cliMain" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintPython_module_cliMain: @@ -569,8 +542,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintTerraform/module with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintTerraform/module" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintTerraform/module" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintTerraform_module: @@ -590,8 +562,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintWithAjv/test with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintWithAjv/test" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintWithAjv/test" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} @@ -602,8 +573,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /lintWithLizard/all with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /lintWithLizard/all" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /lintWithLizard/all" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_lintWithLizard_all: @@ -623,8 +593,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /secretsForEnvFromSops/example with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /secretsForEnvFromSops/example" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /secretsForEnvFromSops/example" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_secretsForEnvFromSops_example: @@ -644,8 +613,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /secretsForGpgFromEnv/example with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /secretsForGpgFromEnv/example" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /secretsForGpgFromEnv/example" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_secretsForGpgFromEnv_example: @@ -665,8 +633,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /securePythonWithBandit/cli with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /securePythonWithBandit/cli" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /securePythonWithBandit/cli" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_securePythonWithBandit_cli: @@ -686,8 +653,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /taintTerraform/module with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /taintTerraform/module" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /taintTerraform/module" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_taintTerraform_module: @@ -707,8 +673,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /testLicense with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /testLicense" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /testLicense" macos_testLicense: runs-on: macos-latest steps: @@ -724,8 +689,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /testPython/example with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /testPython/example" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /testPython/example" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_testPython_example: @@ -745,8 +709,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /tests/calculateCvss3 with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /tests/calculateCvss3" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /tests/calculateCvss3" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_tests_calculateCvss3: @@ -766,8 +729,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /tests/makeSearchPaths with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /tests/makeSearchPaths" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /tests/makeSearchPaths" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_tests_makeSearchPaths: @@ -787,8 +749,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /tests/makeTemplate with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /tests/makeTemplate" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /tests/makeTemplate" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_tests_makeTemplate: @@ -808,8 +769,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /tests/scriptWithHelp with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /tests/scriptWithHelp" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /tests/scriptWithHelp" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_tests_scriptWithHelp: @@ -829,8 +789,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /tests/secretsForGpgFromEnv with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /tests/secretsForGpgFromEnv" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /tests/secretsForGpgFromEnv" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_tests_secretsForGpgFromEnv: @@ -850,8 +809,7 @@ jobs: - uses: docker://docker.io/nixos/nix@sha256:c3db4c484f6b1ee6c9bb8ca90307cfbeca8ef88156840911356a677eeaff4845 name: /testTerraform/module with: - set-safe-directory: /github/workspace - args: sh -c "nix-env -if . && m . /testTerraform/module" + args: sh -c "chown -R root:root /github/workspace && nix-env -if . && m . /testTerraform/module" env: CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }} macos_testTerraform_module: