pre-commit-run
checks.aarch64-darwin.pre-commit
· build #33
· raw
1Sourcing pytest-check-hook2Using pytestCheckPhase
unpackPhase
3unpacking source archive /nix/store/fn7sdn468ajia73hkvavs90gdz8jfb35-source4source root is sourceconfigurePhase
5no configure script, doing nothingbuildPhase
6Running: $ pre-commit run --all-files7check-merge-conflicts....................................................Passed8check-merge-conflicts-2..................................................Passed9clang-format.............................................................Failed10- hook id: clang-format11- files were modified by this hook12meson-format.............................................................Passed13nixfmt...................................................................Passed14shellcheck...............................................................Passed15zizmor...................................................................Failed16- hook id: zizmor17- exit code: 121819 INFO zizmor: 🌈 zizmor v1.30.020 WARN audit: zizmor: zizmor is running in offline mode by default; some audits and auto-fixes will not be available. see https://docs.zizmor.sh/usage/#operating-modes for details21 INFO audit: zizmor: 🌈 completed .github/workflows/backport.yml22 INFO audit: zizmor: 🌈 completed .github/workflows/ci.yml23 INFO audit: zizmor: 🌈 completed .github/workflows/labels.yml24 INFO audit: zizmor: 🌈 completed .github/workflows/upload-release.yml25help[self-repository]: use GitHub's dedicated self-repository syntax26 --> .github/workflows/ci.yml:32:1327 |2832 | - uses: ./.github/actions/install-nix-action29 | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'30 | _______|31 | |3233 | | with:3334 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }}3435 | | extra_nix_config:3536 | | experimental-features = nix-command flakes3637 | | github_token: ${{ secrets.GITHUB_TOKEN }}3738 | | use_cache: false38 | |________________________- this step39 |40 = note: audit confidence → High41 = note: this finding has an auto-fix4243help[self-repository]: use GitHub's dedicated self-repository syntax44 --> .github/workflows/ci.yml:48:1545 |4648 | - uses: ./.github/actions/install-nix-action47 | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'48 | _________|49 | |5049 | | with:5150 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }}5251 | | extra_nix_config: experimental-features = nix-command flakes5352 | | github_token: ${{ secrets.GITHUB_TOKEN }}54 | |___________________________________________________- this step55 |56 = note: audit confidence → High57 = note: this finding has an auto-fix5859help[self-repository]: use GitHub's dedicated self-repository syntax60 --> .github/workflows/ci.yml:98:1361 |62 98 | - uses: ./.github/actions/install-nix-action63 | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'64 | _______|65 | |66 99 | | with:67100 | | github_token: ${{ secrets.GITHUB_TOKEN }}68101 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }}69... |70104 | | # Since ubuntu 22.30, unprivileged usernamespaces are no longer allowed to map to the root user:71105 | | # https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces72 | |__________________________________________________________________________________- this step73 |74 = note: audit confidence → High75 = note: this finding has an auto-fix7677help[self-repository]: use GitHub's dedicated self-repository syntax78 --> .github/workflows/ci.yml:156:1379 |80156 | - uses: ./.github/actions/install-nix-action81 | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'82 | _______|83 | |84157 | | with:85158 | | github_token: ${{ secrets.GITHUB_TOKEN }}86159 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }}87 | |______________________________________________________________________________________________________________________________- this step88 |89 = note: audit confidence → High90 = note: this finding has an auto-fix9192help[self-repository]: use GitHub's dedicated self-repository syntax93 --> .github/workflows/ci.yml:232:1394 |95232 | - uses: ./.github/actions/install-nix-action96 | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'97 | _______|98 | |99233 | | with:100234 | | github_token: ${{ secrets.GITHUB_TOKEN }}101235 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }}102236 | | extra_nix_config: "sandbox = true"103 | |__________________________________________- this step104 |105 = note: audit confidence → High106 = note: this finding has an auto-fix107108help[self-repository]: use GitHub's dedicated self-repository syntax109 --> .github/workflows/ci.yml:292:13110 |111292 | - uses: ./.github/actions/install-nix-action112 | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'113 | _______|114 | |115293 | | with:116294 | | github_token: ${{ secrets.GITHUB_TOKEN }}117295 | | dogfood: ${{ github.event_name == 'workflow_dispatch' && inputs.dogfood || github.event_name != 'workflow_dispatch' }}118296 | | extra_nix_config: |119297 | | experimental-features = flakes nix-command ca-derivations impure-derivations120298 | | max-jobs = 1121 | |______________________- this step122 |123 = note: audit confidence → High124 = note: this finding has an auto-fix125126help[self-repository]: use GitHub's dedicated self-repository syntax127 --> .github/workflows/upload-release.yml:26:15128 |12926 | - uses: ./.github/actions/install-nix-action130 | - ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'131 | _________|132 | |13327 | | with:13428 | | dogfood: false # Use stable version13529 | | use_cache: false # Don't want any cache injection shenanigans13630 | | extra_nix_config: |13731 | | experimental-features = nix-command flakes138 | |______________________________________________________- this step139 |140 = note: audit confidence → High141 = note: this finding has an auto-fix14214335 findings (3 ignored, 25 suppressed, 7 safe fixes): 0 informational, 7 low, 0 medium, 0 high144145diff --git a/src/libstore/build/derivation-building-goal.cc b/src/libstore/build/derivation-building-goal.cc146index 5792cec..92d8e69 100644147--- a/src/libstore/build/derivation-building-goal.cc148+++ b/src/libstore/build/derivation-building-goal.cc149@@ -1069,8 +1069,7 @@ Goal::Co DerivationBuildingGoal::buildLocally(150 || settings.extraPlatforms.get().count(drv->platform) || drv->isBuiltin();151 auto required = drvOptions.getRequiredSystemFeatures(*drv);152 auto & available = worker.store.config.systemFeatures.get();153- bool featuresOk =154- std::ranges::all_of(required, [&](const std::string & f) { return available.count(f); });155+ bool featuresOk = std::ranges::all_of(required, [&](const std::string & f) { return available.count(f); });156 if (worker.settings.maxBuildJobs.get() != 0 && platformOk && featuresOk) {157 debug(158 "external builder declined '%s'; falling back to a local build",