check.yml

name: Flake Check

on:
  push:
    branches:
      - master

jobs:
  check:
    runs-on: ubuntu-latest
    permissions:
      contents: "read"

    steps:
      - uses: actions/checkout@v6
      - uses: DeterminateSystems/nix-installer-action@main
        with:
          extra-conf: extra-platforms = aarch64-linux

      - uses: docker/setup-qemu-action@v3
        with:
          platforms: arm64

      - uses: DeterminateSystems/magic-nix-cache-action@main
      - name: Setup SSH Key
        run: |
          install -m 700 -d ~/.ssh
          echo "${{ secrets.SSH_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519

          ssh-keyscan -t ed25519 codeberg.org >> ~/.ssh/known_hosts

      - name: Nix Flake Check
        run: nix flake check --all-systems