Add updater script

flake.lock

@@ -1,5 +1,21 @@
 {
   "nodes": {
+    "advisory-db": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1683272394,
+        "narHash": "sha256-4XQZbSZ8XYAeASpr0Er8mNPnjbYLJwvaB+VyH+bt6DE=",
+        "owner": "RustSec",
+        "repo": "advisory-db",
+        "rev": "50bed3ba4066e6255dab434dc845e7f655812ce1",
+        "type": "github"
+      },
+      "original": {
+        "owner": "RustSec",
+        "repo": "advisory-db",
+        "type": "github"
+      }
+    },
     "flake-utils": {
       "inputs": {
         "systems": "systems"
@@ -56,6 +72,7 @@
     },
     "root": {
       "inputs": {
+        "advisory-db": "advisory-db",
         "naersk": "naersk",
         "nixpkgs": "nixpkgs",
         "rust-overlay": "rust-overlay",

update.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+set -eou pipefail
+
+DIRECTORY=$(dirname "$0")
+pushd $DIRECTORY
+
+# Update our sources first
+$DIRECTORY/sources/update-sources.sh
+
+# Then update the flake
+nix flake update
+
+# Make sure the update worked
+pushd $DIRECTORY/test-crate
+./ci.sh
+rm flake.lock