From 7e4a4cfd11f8cea50e131e64730eac784786f855 Mon Sep 17 00:00:00 2001
From: Seth Flynn <getchoo@tuta.io>
Date: Sun, 21 Sep 2025 16:22:38 -0400
Subject: [PATCH] ci(nix): flakehub -> magic-nix-cache & gha cache

This will help us avoid `pull_request_target`, etc.

Signed-off-by: Seth Flynn <getchoo@tuta.io>
---
 .github/workflows/nix.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index ca3803139..09bc6ca6e 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -91,9 +91,6 @@ jobs:
 
     runs-on: ${{ matrix.os }}
 
-    permissions:
-      id-token: write
-
     steps:
       - name: Get merge commit
         if: ${{ github.event_name == 'pull_request_target' }}
@@ -116,8 +113,11 @@ jobs:
 
         # For PRs
       - name: Setup Nix Magic Cache
-        if: ${{ env.USE_DETERMINATE == 'true' }}
-        uses: DeterminateSystems/flakehub-cache-action@v2
+        if: ${{ github.event_name == 'pull_request_target' }}
+        uses: DeterminateSystems/magic-nix-cache-action@v13
+        with:
+          diagnostic-endpoint: ""
+          use-flakehub: false
 
         # For in-tree builds
       - name: Setup Cachix