fixes

.github/workflows/ci.yml

@@ -10,10 +10,14 @@ concurrency:
 jobs:
   install:
     name: Fresh install
-    runs-on: macos-latest
+    runs-on: macos-13
     steps:
       - name: Check out repository
         uses: actions/checkout@v3
 
+      - name: Set up passwordless sudo
+        run: |
+          echo "runner ALL=(ALL) NOPASSWD: ALL" | sudo tee -a /etc/sudoers.d/runner
+
       - name: Runs install script
         run: ./install.sh

etc/Brewfile

@@ -72,8 +72,10 @@ cask "sonos"
 cask "spotify"
 cask "stats"
 
-mas "Dark Reader for Safari", id: 1438243180
-mas "NextDNS", id: 1464122853
+if not ENV["CI"]
+   mas "Dark Reader for Safari", id: 1438243180
+   mas "NextDNS", id: 1464122853
+end
 
 if ENV["XCODE"]
   mas "Xcode", id: 497799835

justfile

@@ -9,7 +9,10 @@ dotbot:
     dotbot --config-file "{{ justfile_directory() }}/etc/dotbot.yaml" --base-directory "{{ justfile_directory() }}" --quiet
 
 homebrew:
-   /bin/bash -c "NONINTERACTIVE=1 $(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
+    #!/usr/bin/env bash
+    if ! which brew &>/dev/null; then
+        NONINTERACTIVE=1 /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
+    fi
 
 brew:
     brew bundle install --file="{{ justfile_directory() }}/etc/Brewfile" --force --no-lock