1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
|
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="utf-8">
<meta name="generator" content="Docutils 0.22.4: https://docutils.sourceforge.io/">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta content="Nixtamal, Nix, Git, GitLab, Git forge, input pinning, dependency management" name="keywords">
<meta content="How to pin a GitLab repository with Nixtamal + Nix" name="description">
<meta name="author" content="toastal">
<meta name="dcterms.date" content="2026-02-28">
<link rel="schema.dcterms" href="http://purl.org/dc/terms/">
<meta content="" name="robots">
<title>
Pinning GitLab Inputs | Nixtamal
</title>
<meta name="generator" content="soupault">
<meta name="viewport" content="width=device-width,initial-scale=1">
<meta http-equiv="X-XSS-Protection" content="1;mode=block">
<meta http-equiv="X-Content-Type-Options" content="nosniff">
<meta http-equiv="Content-Security-Policy" content="default-src 'self';">
<meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin">
<meta name="theme" content="crimson">
<link rel="icon" type="image/svg+xml" href="/asset/_hashed/nixtamal/image/nixtamal-logo-gmxzsw8388sf9paq05xws7an4hnl4nx0.svg">
<link rel="stylesheet" href="/asset/_hashed/nixtamal/style/font-j47xx20z5d89qpsl95nnbipkg6d25m6y.css">
<link rel="stylesheet" href="/asset/_hashed/sugilite256/chroma-light-yfrfnk1zyqm9dc67gaa5y67s0a6x40ji.css">
<link rel="stylesheet" href="/asset/_hashed/sugilite256/chroma-dark-s4ssx3zwz2w418zx7pkrqlwqmywgvahl.css" media="(prefers-color-scheme: dark)">
<link rel="stylesheet" href="/asset/_hashed/nixtamal/style/main-lmdn1rci18371fnrcqrwga636ip08irz.css">
<link rel="author" href="/humans.txt">
</head>
<body>
<div id="DocWrapper" class="DocWrapper">
<div class="Banner-wrapper">
<header id="Banner" class="Banner">
<pre role="none" class="Banner-flair">âââ»+â» â±ââ³âââââ³ââââ»
ââââââââ¹ââ¹â£â«ââââ£â«â
â¹âââ¹â± â¹ â¹ â¹â¹â¹ â¹â¹â¹ââ</pre>
<a href="/" class="SiteLogo" title="Home">
<svg viewbox="0 0 79.375 27.099415" class="SiteLogo-image" role="img" aria-labelledby="SiteLogo-desc">
<use href="/asset/_hashed/nixtamal/image/nixtamal-logo-gmxzsw8388sf9paq05xws7an4hnl4nx0.svg#logo">
<desc id="SiteLogo-desc">
Home
</desc>
</use>
</svg>
</a>
<nav id="Navigation" class="Banner-navigation Navigation Navigation--banner" aria-expanded="true">
<a class="Navigation-item" href="/install/">Install</a>
<a class="Navigation-item" href="/manpage/">Manpage</a>
<a class="Navigation-item" href="/changelog/">Changelog</a>
<a class="Navigation-item" href="/roadmap/">Roadmap</a>
<a class="Navigation-item" href="/cookbook/">Cookbook</a>
<a class="Navigation-item" href="/real-world-showcase/">Real-world showcase</a>
<a class="Navigation-item" href="/community/">Community</a>
<a class="Navigation-item" href="/faqs/"><abbr title="frequently asked questions">FAQs</abbr></a>
<a class="Navigation-item" href="/funding/">Funding</a>
</nav>
</header>
<hr class="Banner-separator">
</div>
<main id="Main" class="Main">
<article id="Article" class="Article Stack">
<header class="Headline Article-headline">
<h1 itemprop="headline" class="title">
Pinning GitLab Inputs
</h1>
</header>
<section itemprop="articleBody" id="Content" class="Content Article-body">
<p>
<a class="reference external" href="https://about.gitlab.com/">GitLab</a> is a open-core <a class="reference external" href="https://git-scm.com">Git</a> forge developed broadly by GitLab <abbr title="Incorporation">Inc.</abbr>.
It comes in both community & commericial editions (which can be self-hosted).
There is also a <abbr title="United States of America">U.S.</abbr>-based <a class="reference external" href="https://www.merriam-webster.com/dictionary/gratis">gratis</a> instance at <a class="reference external" href="https://gitlab.com/users/">https://gitlab.com/users/</a> (<a class="reference external" href="https://about.gitlab.com/terms/">terms apply</a>).
</p>
<section id="how-to-pin-a-gitlab-repository-with-nix-nixtamal">
<h2>
How to pin a GitLab repository with Nix + Nixtamal
</h2>
<p>
Letâs show the way using the <a class="reference external" href="https://gitlab.com/saalen/highlight"><cite>highlight</cite></a> repository.
When you write this, you will substitute the owner & project slugs.
In most cases, you will want to prefer fetching the archive (GitLab supports <a class="reference external" href="http://www.bzip.org">bzip</a>) over the Git input kind.
<span class="docutils literal">git <span class="pre">ls-remote</span></span> is preferred by us for being more generic.
</p>
<p class="rubric">
Latest revision
</p>
<pre class="code kdl literal-block"><span class="c1">// manifest.kdl
</span><span class="nl">inputs</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> highlight</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> archive</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> url</span><span class="w"> </span><span class="s">"https://gitlab.com/saalen/highlight/-/archive/{{fresh-value}}/highlight-{{fresh-value}}.tar.bz2"</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="nl"> fresh-cmd</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> $</span><span class="w"> </span><span class="s">git</span><span class="w"> </span><span class="s">ls-remote</span><span class="w"> </span><span class="s">--branches</span><span class="w"> </span><span class="s">master</span><span class="w"> </span><span class="s">"https://gitlab.com/saalen/highlight.git"</span><span class="w">
</span><span class="nl"> |</span><span class="w"> </span><span class="s">cut</span><span class="w"> </span><span class="s">-f1</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="o">}</span></pre>
<p class="rubric">
Latest stable tagged version
</p>
<pre class="code kdl literal-block"><span class="c1">// manifest.kdl
</span><span class="nl">inputs</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> highlight</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> archive</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> url</span><span class="w"> </span><span class="s">"https://gitlab.com/saalen/highlight/-/archive/{{fresh-value}}/highlight-{{fresh-value}}.tar.bz2"</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="w"> </span><span class="c1">// Looks for tag starting with v[0-9] since some tags didnât take on
</span><span class="w"> </span><span class="c1">// this version structure but also must end in [0-9] to remove alpha,
</span><span class="w"> </span><span class="c1">// beta, release tags
</span><span class="nl"> fresh-cmd</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> $</span><span class="w"> </span><span class="s">git</span><span class="w"> </span><span class="s">ls-remote</span><span class="w"> </span><span class="s">--tags</span><span class="w"> </span><span class="na">--sort=</span><span class="s">v:refname</span><span class="w"> </span><span class="s">"https://gitlab.com/saalen/highlight.git"</span><span class="w">
</span><span class="nl"> |</span><span class="w"> </span><span class="s">grep</span><span class="w"> </span><span class="s">-E</span><span class="w"> </span><span class="s">"'refs/tags/v([0-9]+</span><span class="se">\\</span><span class="s">.)+[0-9]+$'"</span><span class="w">
</span><span class="nl"> |</span><span class="w"> </span><span class="s">tail</span><span class="w"> </span><span class="s">-n1</span><span class="w">
</span><span class="nl"> |</span><span class="w"> </span><span class="s">sed</span><span class="w"> </span><span class="s">"'s|.*refs/tags/||'"</span><span class="w">
</span><span class
|
