build.yml

name: Build

on:
  push:
    branches: ["main"]
  pull_request:
    branches: ["main"]
  workflow_call:
  workflow_dispatch:

jobs:
  build:
    permissions:
      id-token: write
      attestations: write

    strategy:
      matrix:
        target:
          - aarch64-apple-darwin
          - x86_64-apple-darwin
        include:
          - target: aarch64-apple-darwin
            system: aarch64-darwin
          - target: x86_64-apple-darwin
            system: x86_64-darwin
      fail-fast: false

    runs-on: macos-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install Nix
        uses: DeterminateSystems/nix-installer-action@main

      - name: Setup Nix cache
        uses: DeterminateSystems/magic-nix-cache-action@main

      - name: Build
        run: nix build --fallback --print-build-logs '.#packages.${{ matrix.system }}.morlana'

      - name: Generate build provenance attestations
        uses: actions/attest-build-provenance@v2
        if: ${{ github.event_name != 'pull_request' }}
        with:
          subject-path: ./result/bin/morlana

      - name: Upload artifact
        uses: actions/upload-artifact@v4
        with:
          if-no-files-found: "error"
          name: morlana-${{ matrix.system }}
          path: ./result/bin/morlana