name: check-flake
on:
  push:
    branches:
      - main
  pull_request:

jobs:
  lockfile:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          ref: "main"
      - name: Setup sudo (required for the next step)
        run: apt-get update && apt-get install -y sudo
      - name: Setup nix
        uses: cachix/install-nix-action@v26
        with:
          github_access_token: ${{ secrets.GH_ACCESS_TOKEN }}
      - name: Build nix flake
        run: nix build
      - name: Check nix flake
        run: nix flake check --all-systems