From f7dbdb79be8b50cf76d8e25dd4746e60c1015ed9 Mon Sep 17 00:00:00 2001
From: Seth Flynn <getchoo@tuta.io>
Date: Mon, 7 Apr 2025 08:19:58 -0400
Subject: [PATCH] ci(nix): pin release packages in cachix

Signed-off-by: Seth Flynn <getchoo@tuta.io>
(cherry picked from commit 180292098d9c4ad87ed0d9babed92e152feb5475)
---
 .github/workflows/nix.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index 7d0514608..478b196ea 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -93,5 +93,11 @@ jobs:
 
       - name: Build release package
         if: ${{ env.DEBUG == 'false' }}
+        env:
+          TAG: ${{ github.ref_name }}
+          SYSTEM: ${{ matrix.system }}
         run: |
           nix build --print-build-logs .#prismlauncher
+          nix build --no-link --print-out-paths .#prismlauncher \
+            | tee -a "$GITHUB_STEP_SUMMARY" \
+            | xargs cachix pin prismlauncher "$TAG"-"$SYSTEM"