check

bump nixos-hardware #3091

	# SPDX-FileCopyrightText: 2022-2023 TII (SSRC) and the Ghaf contributors
	#
	# SPDX-License-Identifier: Apache-2.0

	name: check
	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main
	permissions:
	contents: read

	jobs:
	run-checks:
	runs-on: ubuntu-latest
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
	with:
	egress-policy: audit

	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- name: Install nix
	uses: cachix/install-nix-action@d1ca217b388ee87b2507a9a93bf01368bde7cec2 # v31
	- name: Check .nix formatting
	run: nix fmt -- --fail-on-change
	- name: Check reuse lint
	run: nix develop --command reuse lint
	- name: Check nix flake show runs successfully
	run: nix flake show --all-systems
	- name: Check templates
	run: \|
	set -eux -o pipefail
	tmp_flakes=$(mktemp -d)
	cleanup() { rm -rf "$tmp_flakes"; }
	trap cleanup EXIT
	nix eval --json --apply builtins.attrNames .#templates \| jq -r '.[]' \| while IFS=$'\t' read -r name; do
	nix flake new -t ".#$name" "${tmp_flakes}/${name}";
	if [[ "$name" == "ghaf-module" ]]; then
	nix-instantiate --parse "${tmp_flakes}/${name}/default.nix"
	else
	nix flake show "${tmp_flakes}/${name}"
	fi
	done

Provide feedback