attempt

.gitea/workflows/check-flake.yaml

@@ -33,6 +33,6 @@ jobs:
           # signed by cache.nixos.org — only our custom builds need caching
           paths=$(echo "$toplevels" \
             | xargs nix path-info -r --json \
-            | jq -r '[.[] | select((.signatures // []) | all(startswith("cache.nixos.org") | not)) | .path] | unique[]')
+            | jq -r '[to_entries[] | select(.value.signatures | all(startswith("cache.nixos.org") | not)) | .key] | unique[]')
           echo "Pushing $(echo "$paths" | wc -l) unique paths to cache"
           echo "$paths" | xargs attic push local:nixos