{ "name": "update flake.nix", "image": "nixos:latest", "secrets": { "SECRET_SSH": "/run/secrets/msci/sshkey" }, "run": ["./update.sh"] }