NixOS/release-wiki

Tag name is dangerous

roberth opened this issue · 2 comments

roberth commented 
{
  inputs.nixpkgs.url = "NixOS/nixpkgs/22.05";
}

Did you spot the security issue?

Let's replace the release tags by something descriptive, like 22.05-start or 22.05.0, so that users don't accidentally fail to update their packages.

dasJ commented

While I agree with the point in general, this particular example feels like a niv bug.
I wouldn't expect --branch to use a tag.

  • 👍1
roberth commented

this particular example feels like a niv bug.

That's fair actually. I figured I'd add a non-flake example, but this is not it. Editing.