Enable provenance in build step

[lucperkins]

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow configuration to enable experimental provenance features.

[coderabbitai]

📝 Walkthrough

Walkthrough

A GitHub Actions workflow configuration was updated to enable experimental provenance features by adding an extra-conf block to the DeterminateSystems/determinate-nix-action step, with no modifications to existing workflow steps.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow .github/workflows/workflow.yml	Added extra-conf block to enable experimental provenance features in the Determinate Nix Action step.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A whisker-twitch of config code,
Provenance now the workflow's mode,
Three lines added, clean and bright,
Experimental features take flight! ✨

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The pull request description is completely empty, providing no context or explanation for the changes made.	Add a description explaining what provenance is, why it's being enabled, and any relevant impact or testing details for the workflow change.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately and concisely describes the main change: enabling provenance features in the build workflow step.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch enable-provenance

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Caution

Failed to replace (edit) comment. This is likely due to insufficient permissions or the comment being deleted.

Error details

{"name":"HttpError","status":401,"request":{"method":"PATCH","url":"https://api.github.com/repos/DeterminateSystems/ci/issues/comments/3915338616","headers":{"accept":"application/vnd.github.v3+json","user-agent":"octokit.js/0.0.0-development octokit-core.js/7.0.6 Node.js/24","authorization":"token [REDACTED]","content-type":"application/json; charset=utf-8"},"body":{"body":"<!-- This is an auto-generated comment: summarize by coderabbit.ai -->\n<!-- This is an auto-generated comment: failure by coderabbit.ai -->\n\n> [!CAUTION]\n> ## Review failed\n> \n> Failed to post review comments\n\n<!-- end of auto-generated comment: failure by coderabbit.ai -->\n\n<!-- walkthrough_start -->\n\n<details>\n<summary>📝 Walkthrough</summary>\n\n## Walkthrough\n\nA GitHub Actions workflow configuration was updated to enable experimental provenance features by adding an `extra-conf` block to the DeterminateSystems/determinate-nix-action step, with no modifications to existing workflow steps.\n\n## Changes\n\n|Cohort / File(s)|Summary|\n|---|---|\n|**GitHub Actions Workflow** <br> `.github/workflows/workflow.yml`|Added `extra-conf` block to enable experimental provenance features in the Determinate Nix Action step.|\n\n## Estimated code review effort\n\n🎯 1 (Trivial) | ⏱️ ~3 minutes\n\n## Poem\n\n> 🐰 A whisker-twitch of config code,\n> Provenance now the workflow's mode,\n> Three lines added, clean and bright,\n> Experimental features take flight! ✨\n\n</details>\n\n<!-- walkthrough_end -->\n\n\n<!-- pre_merge_checks_walkthrough_start -->\n\n<details>\n<summary>🚥 Pre-merge checks | ✅ 2 | ❌ 1</summary>\n\n### ❌ Failed checks (1 warning)\n\n|     Check name    | Status     | Explanation                                                                                                 | Resolution                                                                                                                                   |\n| :---------------: | :--------- | :---------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------- |\n| Description check | ⚠️ Warning | The pull request description is completely empty, providing no context or explanation for the changes made. | Add a description explaining what provenance is, why it's being enabled, and any relevant impact or testing details for the workflow change. |\n\n<details>\n<summary>✅ Passed checks (2 passed)</summary>\n\n|     Check name     | Status   | Explanation                                                                                                            |\n| :----------------: | :------- | :--------------------------------------------------------------------------------------------------------------------- |\n|     Title check    | ✅ Passed | The title accurately and concisely describes the main change: enabling provenance features in the build workflow step. |\n| Docstring Coverage | ✅ Passed | No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.             |\n\n</details>\n\n<sub>✏️ Tip: You can configure your own custom pre-merge checks in the settings.</sub>\n\n</details>\n\n<!-- pre_merge_checks_walkthrough_end -->\n\n<!-- finishing_touch_checkbox_start -->\n\n<details>\n<summary>✨ Finishing touches</summary>\n\n<details>\n<summary>🧪 Generate unit tests (beta)</summary>\n\n- [ ] <!-- {\"checkboxId\": \"f47ac10b-58cc-4372-a567-0e02b2c3d479\", \"radioGroupId\": \"utg-output-choice-group-unknown_comment_id\"} -->   Create PR with unit tests\n- [ ] <!-- {\"checkboxId\": \"07f1e7d6-8a8e-4e23-9900-8731c2c87f58\", \"radioGroupId\": \"utg-output-choice-group-unknown_comment_id\"} -->   Post copyable unit tests in a comment\n- [ ] <!-- {\"checkboxId\": \"6ba7b810-9dad-11d1-80b4-00c04fd430c8\", \"radioGroupId\": \"utg-output-choice-group-unknown_comment_id\"} -->   Commit unit tests in branch `enable-provenance`\n\n</details>\n\n</details>\n\n<!-- finishing_touch_checkbox_end -->\n\n<!-- tips_start -->\n\n---\n\nThanks for using [CodeRabbit](https://coderabbit.ai?utm_source=oss&utm_medium=github&utm_campaign=DeterminateSystems/ci&utm_content=42)! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.\n\n<details>\n<summary>❤️ Share</summary>\n\n- [X](https://twitter.com/intent/tweet?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A&url=https%3A//coderabbit.ai)\n- [Mastodon](https://mastodon.social/share?text=I%20just%20used%20%40coderabbitai%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20the%20proprietary%20code.%20Check%20it%20out%3A%20https%3A%2F%2Fcoderabbit.ai)\n- [Reddit](https://www.reddit.com/submit?title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&text=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code.%20Check%20it%20out%3A%20https%3A//coderabbit.ai)\n- [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fcoderabbit.ai&mini=true&title=Great%20tool%20for%20code%20review%20-%20CodeRabbit&summary=I%20just%20used%20CodeRabbit%20for%20my%20code%20review%2C%20and%20it%27s%20fantastic%21%20It%27s%20free%20for%20OSS%20and%20offers%20a%20free%20trial%20for%20proprietary%20code)\n\n</details>\n\n<sub>Comment `@coderabbitai help` to get the list of available commands and usage tips.</sub>\n\n<!-- tips_end -->\n\n<!-- internal state start -->\n\n\n<!-- DwQgtGAEAqAWCWBnSTIEMB26CuAXA9mAOYCmGJATmriQCaQDG+Ats2bgFyQAOFk+AIwBWJBrngA3EsgEBPRvlqU0AgfFwA6NPEgQAfACgjoCEejqANiS4BRDCqs8K+KfYwMSKLAOzwL9RBpuAwA5bGYBSi4AFgAmAwBVACUAGS5YXFxuRA4AelyidVhsAQ0mZlyAERIaCmZ4exoAZVlAkmZEXIZ4XO5sCwtcuMTEKMgLbAZuSgBrBsQDJvxsCg9IASp3WC4yBxIwXhdd9xIDaDQKUlx1zYZtyGZtDEXcamwc/mnnpJIJeBIAO6UD4GFIqEgWEEAYQoJGodHQnEgsQADLEAGxgNFgACMAHZoDiAKwcVEcADMsQAWkZ9MZwFAyPR8AAzHAEYhkZQ0ejlNgYJG8fjCUTiKQyeRMJRUVTqLQ6OkmKBwVCoTDswikchUHkKVjsLhUAGQRDhR4UeRyBTSlRqTTaXRgQz00wGDSFXDFAS5AH4CgzFkWfAAzq+/2B4MaWTMCwcAwAIkTBgAxMnIABBACSnO18ICZou8lZjFgmFICwM6doSno6pIAA9cFQwEwMGyBEGGDNIAQe7BPNVavVGiQWm0OrklEOGvCwBh4PWwGgxPB8BgAAISckmoI9/CQXYdzwN6YUeD814WJxHNxrFlw3AraQaGAIZBoavvyDkY2tlnwIgVmoVcsG4NBEEQNBSEgAEimWa40AsWoGiIA96yQcQMFQtpsn4PhWybfArwjAENCMIxUwzJDuRA5Be09TwlAYCwLmAtdkGLE8/V1P0eBKCx4AYA8BXUf4KygEJ9y4igeV6fjBOE8RcHkJiWJ1WiYMoTw7jLOgyJTNMAFlMHge9AkgAAxPxPHTewLFkAAvSgjBSBppBLXTaC4ABqclcixIwbECc882tTxYT+QEDxZFluK4Qy6HgcIEyTAw6QMJVhOZNk0DwTUuR1BE+QNSAjRNAsLXWSVFGUWV7QVJ0gA -->\n\n<!-- internal state end -->"},"request":{"retryCount":1}},"response":{"url":"https://api.github.com/repos/DeterminateSystems/ci/issues/comments/3915338616","status":401,"headers":{"access-control-allow-origin":"*","access-control-expose-headers":"ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset","connection":"close","content-security-policy":"default-src 'none'","content-type":"application/json; charset=utf-8","date":"Tue, 17 Feb 2026 15:24:23 GMT","referrer-policy":"origin-when-cross-origin, strict-origin-when-cross-origin","server":"github.com","strict-transport-security":"max-age=31536000; includeSubdomains; preload","vary":"Accept-Encoding, Accept, X-Requested-With","x-content-type-options":"nosniff","x-frame-options":"deny","x-github-media-type":"github.v3; format=json","x-github-request-id":"9056:3D891:343BB7:E116FF:69948827","x-xss-protection":"0"},"data":{"message":"Bad credentials","documentation_url":"https://docs.github.com/rest","status":"401"}}}