split builds into separate files

2 files changed, 35 insertions, 24 deletions

diff --git a/.build.yml b/.build.yml
index 3a34af7..ba23305 100644
--- a/.build.yml
+++ b/.build.yml
@@ -3,10 +3,6 @@ oauth: pages.sr.ht/PAGES:RW
 
 packages:
   - hut
-  - git
-  - ca-certificates
-  - gitleaks
-  - swift
 
 sources:
   - https://git.sr.ht/~ccleberg/Hutch
@@ -15,26 +11,6 @@ environment:
   site: hutch.cleberg.net
 
 tasks:
-  - security-secrets: |
-      set -euo pipefail
-      cd Hutch
-      gitleaks git --redact --verbose .
-
-  - security-deps-lockfile: |
-      set -euo pipefail
-      cd Hutch
-      swift package resolve --only-use-versions-from-resolved-file
-
-  - test: |
-      set -euo pipefail
-      cd Hutch
-      swift test --parallel
-
-  - build: |
-      set -euo pipefail
-      cd Hutch
-      swift build -c release
-
   - package-site: |
       set -euo pipefail
       cd Hutch/website
diff --git a/builds/swift-ci.yml b/builds/swift-ci.yml
new file mode 100644
index 0000000..efc5938
--- /dev/null
+++ b/builds/swift-ci.yml
@@ -0,0 +1,35 @@
+image: swift:5.10
+
+packages:
+  - git
+  - ca-certificates
+
+sources:
+  - https://git.sr.ht/~ccleberg/Hutch
+
+tasks:
+  - security-secrets: |
+      set -euo pipefail
+      cd Hutch
+      VERSION=8.24.2
+      ARCHIVE="gitleaks_${VERSION}_linux_x64.tar.gz"
+      URL="https://github.com/gitleaks/gitleaks/releases/download/v${VERSION}/${ARCHIVE}"
+      curl -fsSLo /tmp/gitleaks.tar.gz "$URL"
+      tar -xzf /tmp/gitleaks.tar.gz -C /tmp
+      install -m 0755 /tmp/gitleaks /usr/local/bin/gitleaks
+      gitleaks git --redact --verbose .
+
+  - security-deps-lockfile: |
+      set -euo pipefail
+      cd Hutch
+      swift package resolve --only-use-versions-from-resolved-file
+
+  - test: |
+      set -euo pipefail
+      cd Hutch
+      swift test --parallel
+
+  - build: |
+      set -euo pipefail
+      cd Hutch
+      swift build -c release