ci: continue on nix environment install timeout
What the developer wrote
Authored by Martin Milata
ci: continue on nix environment install timeout
What changed, and why it matters
This is a one-line change to a GitHub Actions CI workflow. It makes the build pipeline continue even if the Nix package environment installation step times out or fails, instead of stopping the whole job. There is no indication this affects the security of the Trezor firmware, wallet keys, or user data.
No security action required. As a general CI hygiene note, swallowing failures can mask real environment setup problems; ensure downstream steps do not silently run with a broken or partial Nix environment.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies .github/actions/environment/action.yml. The Dependencies nixpkgs step previously ran nix-shell ... --run "true" and would fail the job on non-zero exit. The new command appends || echo "NIXPKGS PREINSTALL FAILURE", so any failure (including timeout) is swallowed and the workflow proceeds. This is purely a CI reliability tweak.
Changed components
.github/actions/environment/action.ymlInspect captured patch +1 / −1
diff --git a/.github/actions/environment/action.yml b/.github/actions/environment/action.yml
index 80ad35687..a7a65f40e 100644
--- a/.github/actions/environment/action.yml
+++ b/.github/actions/environment/action.yml
@@ -13,7 +13,7 @@ runs:
with:
nix_path: nixpkgs=channel:nixos-unstable
- name: Dependencies nixpkgs
- run: timeout -v --kill-after=10 500 nix-shell --arg fullDeps "${{ inputs.full-deps }}" --run "true"
+ run: timeout -v --kill-after=10 500 nix-shell --arg fullDeps "${{ inputs.full-deps }}" --run "echo nixpkgs deps preinstalled" || echo "NIXPKGS PREINSTALL FAILURE"
shell: sh
- name: Dependencies uv
run: timeout -v --kill-after=10 200 nix-shell --arg fullDeps "${{ inputs.full-deps }}" --run "uv sync"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.