From 64ff4e80b336ef8ed5649beeabed78d3333254bb Mon Sep 17 00:00:00 2001
From: Tim McGilchrist <timmcgil@gmail.com>
Date: Sat, 18 Apr 2026 14:25:51 +1000
Subject: [PATCH] Add CA cert for nixery image

---
 .tangled/workflows/ci.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/.tangled/workflows/ci.yaml b/.tangled/workflows/ci.yaml
index 75d6296..e3caa1c 100644
--- a/.tangled/workflows/ci.yaml
+++ b/.tangled/workflows/ci.yaml
@@ -9,31 +9,44 @@ dependencies:
   nixpkgs:
     - emacs30
     - curl
+    - cacert
+    - which
 
 steps:
   - name: "Install Eldev"
     command: |
+      export SSL_CERT_FILE="/etc/ssl/certs/ca-bundle.crt"
+      export NIX_SSL_CERT_FILE="$SSL_CERT_FILE"
+      export CURL_CA_BUNDLE="$SSL_CERT_FILE"
       curl -fsSL https://raw.github.com/emacs-eldev/eldev/master/webinstall/eldev | sh
       export PATH="$HOME/.local/bin:$PATH"
       eldev --version
 
   - name: "Install tree-sitter grammars"
     command: |
+      export SSL_CERT_FILE="/etc/ssl/certs/ca-bundle.crt"
+      export NIX_SSL_CERT_FILE="$SSL_CERT_FILE"
       export PATH="$HOME/.local/bin:$PATH"
       eldev eval '(curry-install-grammars)'
       eldev eval '(progn (load "curry-cabal-mode") (curry-cabal-install-grammar))'
 
   - name: "Byte-compile"
     command: |
+      export SSL_CERT_FILE="/etc/ssl/certs/ca-bundle.crt"
+      export NIX_SSL_CERT_FILE="$SSL_CERT_FILE"
       export PATH="$HOME/.local/bin:$PATH"
       eldev byte-compile --warnings-as-errors
 
   - name: "Test"
     command: |
+      export SSL_CERT_FILE="/etc/ssl/certs/ca-bundle.crt"
+      export NIX_SSL_CERT_FILE="$SSL_CERT_FILE"
       export PATH="$HOME/.local/bin:$PATH"
       eldev test
 
   - name: "Lint"
     command: |
+      export SSL_CERT_FILE="/etc/ssl/certs/ca-bundle.crt"
+      export NIX_SSL_CERT_FILE="$SSL_CERT_FILE"
       export PATH="$HOME/.local/bin:$PATH"
       eldev lint
-- 
knotmirror 0.0.1