workflows: upload nixos test output

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>

.gitea/workflows/nix.yml

@@ -23,4 +23,13 @@ jobs:
           enable_kvm: true
 
       - name: Run tests
-        run: nix --print-build-logs --experimental-features 'nix-command flakes' flake check --all-systems
+        run: |
+          nix --print-build-logs --experimental-features 'nix-command flakes' flake check --all-systems
+          nix build --out-link "result" --print-out-paths --print-build-logs .#checks.x86_64-linux.nixos-tests
+
+      - name: Upload test output
+        uses: actions/upload-artifact@v3
+        with:
+          name: "result"
+          path: result/*
+          retention-days: 1

.gitea/workflows/test.yml

@@ -44,13 +44,16 @@ jobs:
         run: >-
           go test ./...
 
-      - name: Build for Linux
+      - name: Build for test
+        id: build-test
         run: >-
-          go build -v -ldflags '-s -w
+          FORTIFY_VERSION="$(git rev-parse --short HEAD)"
-          -X git.ophivana.moe/security/fortify/internal.Version=${{ github.ref_name }}
+          bash -c './dist/release.sh &&
-          -X git.ophivana.moe/security/fortify/internal.Fsu=/usr/bin/fsu
+          echo "rev=$FORTIFY_VERSION" >> $GITHUB_OUTPUT'
-          -X git.ophivana.moe/security/fortify/internal.Finit=/usr/libexec/fortify/finit
+
-          -X main.Fmain=/usr/bin/fortify
+      - name: Upload test build
-          -X main.Fshim=/usr/libexec/fortify/fshim'
+        uses: actions/upload-artifact@v3
-          -o bin/ ./... &&
+        with:
-          (cd bin && sha512sum --tag -b * > sha512sums)
+          name: "fortify-${{ steps.build-test.outputs.rev }}"
+          path: dist/fortify-*
+          retention-days: 1