From 61a31afdcf2d22e3828093fd100baa17433e3f09 Mon Sep 17 00:00:00 2001
From: Jonathan Lorimer <jonathan_lorimer@mac.com>
Date: Thu, 24 Aug 2023 09:07:22 -0400
Subject: [PATCH] improve release workflow

---
 .github/workflows/ci.yml       | 18 +++++-------------
 .github/workflows/release.yaml | 18 ++++++++++++++++--
 .github/workflows/rolling.yaml | 33 +++++++++++++++++++++++++++++++++
 3 files changed, 54 insertions(+), 15 deletions(-)
 create mode 100644 .github/workflows/rolling.yaml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 564e1c2b..37b6e8f9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,22 +1,14 @@
-name: Build and Check
+name: Check PR
 
 on:
-  push:
-    branches: master
   pull_request:
 
 jobs:
-  build-and-deploy:
-    runs-on: ubuntu-latest
+  check-pr:
+    runs-on: ubuntu-22.04
     steps:
-      - name: Checkout 🛎️
-        uses: actions/checkout@v2.3.1
-
-      - name: Install Nix ❄️
-        uses: cachix/install-nix-action@v20
-        with:
-          extra_nix_config: |
-            experimental-features = nix-command flakes
+      - uses: actions/checkout@v2.3.1
+      - uses: DeterminateSystems/nix-installer-action@main
 
       - name: Link Cachix 🔌
         uses: cachix/cachix-action@v12
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 8211d4b2..ba649214 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -3,18 +3,32 @@ name: Release
 on:
   push:
     tags:
-      - "*"
+      - "v?[0-9]+.[0-9]+.[0-9]+*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "The existing tag to publish to FlakeHub"
+        type: "string"
+        required: true
 
 jobs:
   release:
     name: Release
     runs-on: ubuntu-22.04
     permissions:
+      id-token: write
       contents: write
     steps:
+      - uses: DeterminateSystems/nix-installer-action@v4
       - uses: actions/checkout@v3
-      - name: Create Github Release
+
+      - name: Create Github Release 📦
         uses: ncipollo/release-action@v1
         with:
           generateReleaseNotes: true
 
+      - name: Push to FlakeHub ❄️
+        uses: determinatesystems/flakehub-push@main
+        with:
+          visibility: "public"
+          tag: "${{ inputs.tag }}"
diff --git a/.github/workflows/rolling.yaml b/.github/workflows/rolling.yaml
new file mode 100644
index 00000000..2eb25c16
--- /dev/null
+++ b/.github/workflows/rolling.yaml
@@ -0,0 +1,33 @@
+name: Deploy Main
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  deploy-main:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v3
+      - uses: DeterminateSystems/nix-installer-action@main
+
+      - name: Link Cachix 🔌
+        uses: cachix/cachix-action@v12
+        with:
+          name: cosmos
+          authToken: '${{ secrets.COSMOS_CACHE_KEY }}'
+
+      - name: Check 🔎
+        run: |
+          nix flake check --print-build-logs
+
+      - name: Run Shell 🐚
+        run: |
+          nix develop
+
+      - name: Push to FlakeHub ❄️
+        uses: determinatesystems/flakehub-push@main
+        with:
+          rolling: true
+          visibility: "public"