check.yml

name: Validate
on: [push, pull_request]
permissions:
  contents: read
jobs:
  check:
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, macos-15-intel]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
      - uses: cachix/install-nix-action@b85815f71a6de0ddee80b8a80a98d43f4bcc66c7
      - name: Test bootstrap safety
        run: |
          nix develop --command python3 -B -m unittest discover -s tests -v
          bash -n uninstall.sh install.sh scripts/prerequisites.sh
          nix develop --command shellcheck uninstall.sh install.sh scripts/prerequisites.sh modules/fzf-preview modules/shell/common.sh modules/shell/macos.sh modules/shell/bash.sh modules/shell/ble-start.sh modules/shell/ble-finish.sh
      - name: Build example home without activation
        run: nix flake check
      - name: Build uninstall and keep-tools plans without activation
        run: nix develop --command python3 -B tests/check_maintenance_build.py