cron-sync-upstream.yml

---
name: Synchronize upstream (Cron)
on:
  workflow_dispatch:
  schedule:
    # Run this Action every 3 day at 0:00pm UTC
    - cron: "0 0 */3 * *"

jobs:
  sync-upstream:
    runs-on: ubuntu-latest
    steps:
      - name: Generate GitHub Auth Token
        # https://github.com/tibdex/github-app-token
        id: generate_token
        uses: tibdex/github-app-token@main
        with:
          app_id: ${{ secrets.GH_APP_ID }}
          private_key: ${{ secrets.GH_APP_PRIVATE_KEY }}

      - uses: actions/checkout@main
        with:
          ref: master
          # submodules: true
          token: "${{ secrets.ACCESS_TOKEN }}"

      - uses: DeterminateSystems/nix-installer-action@main
      - uses: DeterminateSystems/magic-nix-cache-action@main
      - uses: DeterminateSystems/flake-checker-action@main

      - name: Update flake.lock
        uses: DeterminateSystems/update-flake-lock@main
        with:
          pr-title: "chore(flake) update flake.lock"
          pr-labels: |
            flake-lock
            automated
          inputs: nixpkgs-wayland hyprland sops-nix
          token: ${{ steps.generate_token.outputs.token }}