name: nix

on:
  push:
    branches:
      - master

jobs:
  check:
    runs-on: nix-runner
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: true
          token: "${{ secrets.REPO_PAT }}"
      - run: |
          nix flake check ".?submodules=1"