codgician/Push to azbincache
Publish built Nix store paths to an azbincache binary cache on Azure Blob Storage (or any HTTP host).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 14, 2026
- License
- MIT
Pinned Snippet
uses: codgician/azbincache@bb0eef5a0d3b27e91f3d13cfc7deaa27d73a021c # no releases — HEAD as of 2026-07-11tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| to | Write URL of the cache (Azure container URL, optionally with a SAS '?...sig=', or an HTTP/WebDAV base URL). | yes | — |
| paths | Newline- or space-separated store paths / result symlinks to push (their closures are included). Defaults to ./result. | no | result |
| signing-key | Nix binary cache secret signing key ('name:base64'). Pass from a GitHub secret; delivered to the CLI as an env var, never on the command line. | yes | — |
| auth | Azure auth mode: auto | sas | oidc | service-principal. | no | auto |
| azure-tenant-id | Entra tenant ID (service-principal auth). | no | — |
| azure-client-id | Entra client ID (service-principal auth). | no | — |
| azure-client-secret | Entra client secret (service-principal auth). Consumed as an env var, never logged. | no | — |
| upstream | Newline-separated upstream caches to dedup against, each 'URL[=public-key-name]'. | no | — |
| commit | Commit id recorded in the push manifest. Defaults to the triggering commit SHA. | no | ${{ github.sha }} |
| commit-time | Unix timestamp for the commit manifest. Defaults to the time of the triggering commit. | no | — |
| host | Host label for the manifest (lets multiple runners share a commit). Defaults to the runner OS+arch. | no | — |
| compression | NAR compression: zstd | xz | none. | no | zstd |
| compression-level | Compression level (zstd 1-22, xz 0-9). Tool default if empty. | no | — |
| skip-push | If 'true', resolve everything but upload nothing (dry validation). | no | false |
| extra-args | Additional raw flags appended to `azbincache push`. | no | — |
| version | Flake ref of azbincache to run (e.g. a tag or commit). Defaults to the released major. | no | github:codgician/azbincache |
Outputs
no outputs