test.yml

name: "Build System Configuration"
on:
  pull_request:
  push:
jobs:
  tests:
    runs-on: macos-14
    steps:
    - uses: actions/checkout@v4
      with:
        submodules: true
    - uses: cachix/install-nix-action@v30
      with:
        extra_nix_config: "access-tokens = github.com=${{ secrets.TOKEN }}"
    - name: install git-crypt on the runner via nix flakes
      run: nix profile install nixpkgs#git-crypt
    - name: provide and temporarily unlock secrets as preparation for nix build
      run: |
        echo "$GIT_CRYPT_KEY" | base64  -d > ./git-crypt-key && \
        git-crypt unlock ./git-crypt-key && \
        rm ./git-crypt-key
      env:
        GIT_CRYPT_KEY: ${{ secrets.GIT_CRYPT_KEY }}
    - name: create dirty git worktree to omit git-crypt errors with flakes
      run: echo " " >> flake.nix #
    - name: build darwinConfiguration for apple silicon
      run: nix build '.?submodules=1#darwinConfigurations.m1.system'
    - name: validate nix flake
      run: nix flake check