latest.yaml

---
name: Latest release

on:
  push:
    branches:
      - main

jobs:
  release:
    name: Latest release
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
    steps:
      - uses: actions/checkout@v4
      - uses: DeterminateSystems/nix-installer-action@main
        with:
          extra-conf: |
            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
            extra-substituters = https://tek.cachix.org
            extra-trusted-public-keys = tek.cachix.org-1:+sdc73WFq8aEKnrVv5j/kuhmnW2hQJuqdPJF5SnaCBk=
      - uses: DeterminateSystems/magic-nix-cache-action@main
      - uses: cachix/cachix-action@v15
        with:
          name: tek
          signingKey: ${{ secrets.CACHIX_SIGNING_KEY }}
      - name: build static
        run: nix build .#hix.static
      - uses: softprops/action-gh-release@v2
        name: Create release
        with:
          tag_name: latest
          name: latest
          prerelease: true
          files: |
            result/bin/hix