6 files changed, 25 insertions, 51 deletions
diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
index 9b36a648..fb9526a8 100644
--- a/.github/workflows/build-and-test.yml
+++ b/.github/workflows/build-and-test.yml
@@ -1,3 +1,4 @@
+---
 name: build-and-test
 
 on:
@@ -57,3 +58,20 @@ jobs:
 
       - name: Test
         run: make test
+
+  with-nix:
+    strategy:
+      matrix:
+        platform: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.platform }}
+    steps:
+      # refs/tags/4.2.2 @ 2025-04-10
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+
+      # refs/heads/main @ 2025-04-10
+      - uses: DeterminateSystems/nix-installer-action@0d28deea2bab0f135fcdbb0bd8e4c6ba469c7b32
+
+      # refs/heads/main @ 2025-04-10
+      - uses: nicknovitski/nix-develop@5da6ac475f1ffbcf54ee562fa3056646e146be95
+
+      - run: nix flake check
diff --git a/.github/workflows/cron.yml b/.github/workflows/cron.yml
index 13147a0c..85ee78c1 100644
--- a/.github/workflows/cron.yml
+++ b/.github/workflows/cron.yml
@@ -1,3 +1,4 @@
+---
 name: cron
 
 on:
diff --git a/.github/workflows/lifecycle.yml b/.github/workflows/lifecycle.yml
index a52c6466..50e45996 100644
--- a/.github/workflows/lifecycle.yml
+++ b/.github/workflows/lifecycle.yml
@@ -1,3 +1,4 @@
+---
 name: lifecycle
 
 on:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 6b6434d2..09bf6fcc 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -1,40 +1,10 @@
+---
 name: lint
 
 on:
   workflow_call:
 
 jobs:
-  filter:
-    name: filter
-    runs-on: ubuntu-latest
-    outputs:
-      golang: ${{ steps.filter.outputs.golang }}
-      golang_files: ${{ steps.filter.outputs.golang_files }}
-    steps:
-      - uses: actions/checkout@v4
-      - uses: dorny/paths-filter@v3
-        id: filter
-        with:
-          list-files: shell
-          filters: |
-            golang:
-              - added|modified: '**/*.go'
-              - added|modified: '/go.sum'
-              - added|modified: '/go.mod'
-
-  codeql:
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
-      with:
-        # We must fetch at least the immediate parents so that if this is
-        # a pull request then we can checkout the head.
-        fetch-depth: 2
-
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-
   spelling:
     runs-on: ubuntu-latest
     steps:
@@ -43,21 +13,3 @@ jobs:
 
       - name: Check spelling
         uses: codespell-project/actions-codespell@v2
-
-  go:
-    runs-on: ubuntu-latest
-    needs:
-      - filter
-    if: needs.filter.outputs.golang == 'true'
-    steps:
-      - name: Install Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: 1.22.5
-
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Check Code Formatting
-        run: |
-          test -z "$(gofmt -d ${{ needs.filter.outputs.golang_files }})" || exit 1
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 335bec2d..95c85fe9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,3 +1,4 @@
+---
 name: Build release binaries
 
 on:
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index ed69aed7..3a194af0 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -1,10 +1,11 @@
+---
 name: scan
 
 on:
   push:
-    branches: [ master ]
+    branches: [master]
   pull_request:
-    branches: [ master ]
+    branches: [master]
   schedule:
     - cron: '0 12 * * 6'