flake-check.yml

name: flake check
on:
  push:
    branches: [main]
  pull_request:
  workflow_dispatch:
jobs:
  check:
    runs-on: ubuntu-latest
    permissions:
      contents: read # strictest possible
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6.0.2 (Jan 2026)
      - uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22 (Mar 2026)
      - uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # v13 (Jul 2025)
        continue-on-error: true
      - name: nix flake check
        run: nix flake check --show-trace --keep-going
      - name: build matrix-backend toplevel (dry-run)
        run: |
          nix build .#nixosConfigurations.matrix-backend.config.system.build.toplevel \
            --dry-run \
            --show-trace