From 55578bf949c476a189cacd7dcd7bd6919eed63c3 Mon Sep 17 00:00:00 2001
From: Seth Flynn <getchoo@tuta.io>
Date: Wed, 29 Jan 2025 16:17:01 -0500
Subject: [PATCH 1/2] ci: use flakehub cache

Signed-off-by: Seth Flynn <getchoo@tuta.io>
(cherry picked from commit 8816be166821d5ce1a4cd8edfbe7b91727b6eb34)
---
 .github/workflows/nix.yml | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index f167440cd..642f9e670 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -24,6 +24,7 @@ permissions:
 
 env:
   DEBUG: ${{ github.ref_type != 'tag' }}
+  USE_DETERMINATE: ${{ github.event_name == 'pull_request' }}
 
 jobs:
   build:
@@ -47,19 +48,26 @@ jobs:
 
     runs-on: ${{ matrix.os }}
 
+    permissions:
+      id-token: write
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Install Nix
-        uses: cachix/install-nix-action@v30
+        uses: DeterminateSystems/nix-installer-action@v16
+        with:
+          determinate: ${{ env.USE_DETERMINATE }}
 
         # For PRs
       - name: Setup Nix Magic Cache
-        uses: DeterminateSystems/magic-nix-cache-action@v9
+        if: ${{ env.USE_DETERMINATE }}
+        uses: DeterminateSystems/flakehub-cache-action@v1
 
         # For in-tree builds
       - name: Setup Cachix
+        if: ${{ github.event_name == 'push' || github.event_name == 'workflow_dispatch' }}
         uses: cachix/cachix-action@v15
         with:
           name: prismlauncher

From 7b502fe8c9701374d915b251db619eda0e41c44a Mon Sep 17 00:00:00 2001
From: Seth Flynn <getchoo@tuta.io>
Date: Wed, 29 Jan 2025 16:22:44 -0500
Subject: [PATCH 2/2] ci: run nix workflow on pull_request_target

Signed-off-by: Seth Flynn <getchoo@tuta.io>
(cherry picked from commit 169f5728b1019582db150f3b1618515eb1438517)
---
 .github/workflows/nix.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index 642f9e670..0792b172c 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -10,7 +10,7 @@ on:
       - "flatpak/**"
     tags:
       - "*"
-  pull_request:
+  pull_request_target:
     paths-ignore:
       - "**.md"
       - "**/LICENSE"