update-lock.yml

on:
  workflow_dispatch:
  schedule:
    - cron: "0 6 * * *"

jobs:
  update-lockfile:
    runs-on: ubuntu-latest

    steps:
      - name: generate temp token
        uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ vars.APP_ID }}
          private-key: ${{ secrets.PRIVATE_KEY }}
          
      - name: install lix
        uses: DeterminateSystems/nix-installer-action@main
        with:
          source-url: https://install.lix.systems/lix/lix-installer-x86_64-linux
          logger: pretty
          diagnostic-endpoint: ""

      - name: magic nix cache
        uses: DeterminateSystems/magic-nix-cache-action@main

      - name: Update Lockfile
        run: nix flake update

      - name: Commit & Push changes
        uses: actions-js/push@master
        with:
          github_token: ${{ steps.app-token.outputs.token }}
          message: "chore: update flake inputs"