1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
|
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta charset="utf-8">
<meta name="generator" content="Docutils 0.22.4: https://docutils.sourceforge.io/">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta content="Nixtamal, Nix, Git, GitHub, Git forge, input pinning, dependency management" name="keywords">
<meta content="How to pin a Microsoft GitHub repository with Nixtamal + Nix" name="description">
<meta name="author" content="toastal">
<meta name="dcterms.date" content="2026-02-28">
<link rel="schema.dcterms" href="http://purl.org/dc/terms/">
<meta content="" name="robots">
<title>
Pinning Microsoft GitHub Inputs | Nixtamal
</title>
<meta name="generator" content="soupault">
<meta name="viewport" content="width=device-width,initial-scale=1">
<meta http-equiv="X-XSS-Protection" content="1;mode=block">
<meta http-equiv="X-Content-Type-Options" content="nosniff">
<meta http-equiv="Content-Security-Policy" content="default-src 'self';">
<meta http-equiv="Referrer-Policy" content="strict-origin-when-cross-origin">
<meta name="theme" content="crimson">
<link rel="icon" type="image/svg+xml" href="/asset/_hashed/nixtamal/image/nixtamal-logo-gmxzsw8388sf9paq05xws7an4hnl4nx0.svg">
<link rel="stylesheet" href="/asset/_hashed/nixtamal/style/font-j47xx20z5d89qpsl95nnbipkg6d25m6y.css">
<link rel="stylesheet" href="/asset/_hashed/sugilite256/chroma-light-yfrfnk1zyqm9dc67gaa5y67s0a6x40ji.css">
<link rel="stylesheet" href="/asset/_hashed/sugilite256/chroma-dark-s4ssx3zwz2w418zx7pkrqlwqmywgvahl.css" media="(prefers-color-scheme: dark)">
<link rel="stylesheet" href="/asset/_hashed/nixtamal/style/main-lmdn1rci18371fnrcqrwga636ip08irz.css">
<link rel="author" href="/humans.txt">
</head>
<body>
<div id="DocWrapper" class="DocWrapper">
<div class="Banner-wrapper">
<header id="Banner" class="Banner">
<pre role="none" class="Banner-flair">âââ»+â» â±ââ³âââââ³ââââ»
ââââââââ¹ââ¹â£â«ââââ£â«â
â¹âââ¹â± â¹ â¹ â¹â¹â¹ â¹â¹â¹ââ</pre>
<a href="/" class="SiteLogo" title="Home">
<svg viewbox="0 0 79.375 27.099415" class="SiteLogo-image" role="img" aria-labelledby="SiteLogo-desc">
<use href="/asset/_hashed/nixtamal/image/nixtamal-logo-gmxzsw8388sf9paq05xws7an4hnl4nx0.svg#logo">
<desc id="SiteLogo-desc">
Home
</desc>
</use>
</svg>
</a>
<nav id="Navigation" class="Banner-navigation Navigation Navigation--banner" aria-expanded="true">
<a class="Navigation-item" href="/install/">Install</a>
<a class="Navigation-item" href="/manpage/">Manpage</a>
<a class="Navigation-item" href="/changelog/">Changelog</a>
<a class="Navigation-item" href="/roadmap/">Roadmap</a>
<a class="Navigation-item" href="/cookbook/">Cookbook</a>
<a class="Navigation-item" href="/real-world-showcase/">Real-world showcase</a>
<a class="Navigation-item" href="/community/">Community</a>
<a class="Navigation-item" href="/faqs/"><abbr title="frequently asked questions">FAQs</abbr></a>
<a class="Navigation-item" href="/funding/">Funding</a>
</nav>
</header>
<hr class="Banner-separator">
</div>
<main id="Main" class="Main">
<article id="Article" class="Article Stack">
<header class="Headline Article-headline">
<h1 itemprop="headline" class="title">
Pinning Microsoft GitHub Inputs
</h1>
</header>
<section itemprop="articleBody" id="Content" class="Content Article-body">
<p>
<a title="Beware: this hyperlink will take you to GitHub, a proprietary code forge owned by a US-based, publicly-traded megacorporation, Microsoft which is using your data to train AIs & then sell it back to you" class="bad-proprietary reference external" href="https://github.com/">GitHub</a> is a <abbr title="United States of America">U.S.</abbr>-based closed-source, proprietary <a class="reference external" href="https://git-scm.com">Git</a> forge & social media platform owned by Microsoft.
There is a <a title="Beware: this hyperlink will take you to GitHub, a proprietary code forge owned by a US-based, publicly-traded megacorporation, Microsoft which is using your data to train AIs & then sell it back to you" class="bad-proprietary reference external" href="https://github.com/pricing">gratis</a> tier for repositories (<a title="Beware: this hyperlink will take you to GitHub, a proprietary code forge owned by a US-based, publicly-traded megacorporation, Microsoft which is using your data to train AIs & then sell it back to you" class="bad-proprietary reference external" href="https://docs.github.com/site-policy/github-terms/github-terms-of-service">terms apply</a>).
When you write an input of this kind, you will substitute the owner & project slugs.
</p>
<section id="how-to-pin-a-micosoft-github-repository-with-nix-nixtamal">
<h2>
How to pin a Micosoft GitHub repository with Nix + Nixtamal
</h2>
<p>
Letâs show the way using the <a title="Beware: this hyperlink will take you to GitHub, a proprietary code forge owned by a US-based, publicly-traded megacorporation, Microsoft which is using your data to train AIs & then sell it back to you" class="bad-proprietary reference external" href="https://github.com/movim/movim"><cite>Movim</cite></a> repository.
When you do this, you will substitute the owner & project slugs.
In most cases, you will want to prefer fetching the archive (Microsoft GitHub supports gzip) over the Git input kind.
<span class="docutils literal">git <span class="pre">ls-remote</span></span> is preferred by us for being more generic & anecdotally having less issues with throttling.
</p>
<p class="rubric">
Latest revision
</p>
<pre class="code kdl literal-block"><span class="c1">// manifest.kdl
</span><span class="nl">inputs</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> movim</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> archive</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> url</span><span class="w"> </span><span class="s">"https://github.com/movim/movim/archive/{{fresh-value}}.tar.gz"</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="nl"> fresh-cmd</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> $</span><span class="w"> </span><span class="s">git</span><span class="w"> </span><span class="s">ls-remote</span><span class="w"> </span><span class="s">--heads</span><span class="w"> </span><span class="s">"https://github.com/movim/movim.git"</span><span class="w">
</span><span class="nl"> |</span><span class="w"> </span><span class="s">cut</span><span class="w"> </span><span class="s">-f1</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="o">}</span></pre>
<p class="rubric">
Latest release tag
</p>
<pre class="code kdl literal-block"><span class="c1">// manifest.kdl
</span><span class="nl">inputs</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> movim</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> archive</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> url</span><span class="w"> </span><span class="s">"https://github.com/movim/movim/archive/{{fresh-value}}.tar.gz"</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="nl"> fresh-cmd</span><span class="w"> </span><span class="o">{</span><span class="nl">
</span><span class="nl"> $</span><span class="w"> </span><span class="s">git</span><span class="w"> </span><span class="s">ls-remote</span><span class="w"> </span><span class="s">--tags</span><span class="w"> </span><span class="na">--sort=</span><span class="s">v:refname</span><span class="w"> </span><span class="s">"https://github.com/movim/movim.git"</span><span class="w">
</span><span class="nl"> |</span><span class="w"> </span><span class="s">grep</span><span class="w"> </span><span class="s">-E</span><span class="w"> </span><span class="s">"'refs/tags/v([0-9]+</span><span class="se">\\</span><span class="s">.)+[0-9]+$'"</span><span class="w">
</span><span class="nl"> |</span><span class="w"> </span><span class="s">tail</span><span class="w"> </span><span class="s">-n1</span><span class="w">
</span><span class="nl"> |</span><span class="w"> </span><span class="s">sed</span><span class="w"> </span><span class="s">"'s|.*refs/tags/||'"</span><span class="w">
</span><span class="w"> </span><span class="o">}</span><span class="w">
</span><span class="o">}</span></pre>
</section>
</section>
</article>
</main>
<footer id="Footer" class="Footer">
<p>
Site made with <a href="https://nixos.org">Nix
|
