From affd4e61d61c82c18bd70ac5944acb8983fcb61f Mon Sep 17 00:00:00 2001
From: Tom Alexander <tom@fizz.buzz>
Date: Mon, 13 Jul 2026 18:33:54 -0400
Subject: [PATCH] auth

---
 .webhook_bridge/pipeline-build-homepage-staging.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.webhook_bridge/pipeline-build-homepage-staging.yaml b/.webhook_bridge/pipeline-build-homepage-staging.yaml
index 5acb097..21758ea 100644
--- a/.webhook_bridge/pipeline-build-homepage-staging.yaml
+++ b/.webhook_bridge/pipeline-build-homepage-staging.yaml
@@ -108,10 +108,13 @@ spec:
               script: |
                 #!/usr/bin/env sh
                 set -euo pipefail
+                find /
                 echo -n "$(git log -1 --pretty=%ct)" | tee $(results.unix-time.path)
         workspaces:
           - name: repo
             workspace: git-source
+          - name: nix-cache-creds
+            workspace: nix-cache-creds
         runAfter:
           - fetch-repository
       - name: build-image
@@ -142,6 +145,9 @@ spec:
               - "type=registry,ref=$(params.image-name):buildcache,mode=max,compression=zstd,compression-level=22,rewrite-timestamp=true,image-manifest=true,oci-mediatypes=true"
               - --opt
               - build-arg:SOURCE_DATE_EPOCH=$(tasks.get-git-commit-time.results.unix-time)
+              # - --secret
+              # - id=cache_token,src=./my_local_token.txt
+              # - id=cache_token,env=MY_ENV_TOKEN
           - name: BUILDKITD_TOML
             value: |
               debug = true
@@ -155,6 +161,8 @@ spec:
             workspace: git-source
           - name: dockerconfig
             workspace: docker-credentials
+          - name: nix-cache-creds
+            workspace: nix-cache-creds
         runAfter:
           - fetch-repository
     finally:
@@ -219,6 +227,7 @@ spec:
     workspaces:
       - name: git-source
       - name: docker-credentials
+      - name: nix-cache-creds
   workspaces:
     - name: git-source
       volumeClaimTemplate:
@@ -233,6 +242,9 @@ spec:
     - name: docker-credentials
       secret:
         secretName: harbor-plain
+    - name: nix-cache-creds
+      secret:
+        secretName: nix-pull-through-cache
   params:
     - name: image-name
       value: "harbor.fizz.buzz/private/homepage-staging"