Generate GH Actions jobs from Nix flake checks

Author: archigup

.github/workflows/ci.yml

@@ -1,5 +1,7 @@
 name: CI
 
+# To run all of the below checks locally, run `nix flake check -L`
+
 on:
   push:
     branches:
@@ -15,60 +17,56 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  run-checks:
-    # To run all of the below checks locally, run `nix flake check -L`
+  flake-check:
+    name: nix flake check
+    runs-on: ubuntu-latest
+    outputs:
+      checks: ${{ steps.list-checks.outputs.checks }}
+    steps:
+      - uses: actions/[email protected]
+        with:
+          fetch-depth: 0
+          filter: "tree:0"
+      - name: Install Nix
+        run: |
+          curl --proto '=https' --tlsv1.2 -sSf -L \
+            https://install.lix.systems/lix | sh -s -- install --no-confirm
+          sudo tee -a /etc/nix/nix.conf > /dev/null <<EOF
+          extra-substituters = https://d17qv3gttz4z4k.cloudfront.net
+          extra-trusted-public-keys = gglite-nix-cache-1:Zdz1mEqn//xa8ORxHkc76auwxmX8/6C2K/zWRjmq8Co=
+          log-lines = 0
+          EOF
+      - name: Check flake
+        run:
+          nix flake check --no-build --all-systems -L
+      - name: List flake checks
+        id: list-checks
+        run:
+          echo "checks=$(nix eval .#checks.x86_64-linux --apply
+          builtins.attrNames --json)" >> $GITHUB_OUTPUT
+  build-checks:
+    needs: flake-check
     timeout-minutes: 60
     strategy:
       fail-fast: false
       matrix:
-        include:
-          - name: build with GCC
-            check: packages-default
-          - name: build static
-            check: packages-ggl-sdk-static
-          - name: cross-build armv7l static
-            check: packages-ggl-sdk-static-armv7l
-          - name: cross-build aarch64 static
-            check: packages-ggl-sdk-static-aarch64
-          - name: build with Clang
-            check: build-clang
-          - name: build shared lib
-            check: build-shared
-          - name: Rust crate
-            check: build-rust-crate
-          - name: formatting
-            check: formatting
-          - name: clang-tidy
-            check: clang-tidy
-          - name: namespacing
-            check: namespacing
-          - name: cbmc-contracts
-            check: cbmc-contracts
-          - name: header includes
-            check: iwyu
-          - name: editorconfig
-            check: editorconfig
-          - name: spelling
-            check: spelling
-          - name: cmake-lint
-            check: cmake-lint
-    name: Check ${{ matrix.name }}
+        check: ${{ fromJson(needs.flake-check.outputs.checks) }}
+    name: ${{ matrix.check }}
     runs-on: ubuntu-latest
     steps:
       - uses: actions/[email protected]
         with:
           fetch-depth: 0
           filter: "tree:0"
       - name: Install Nix
-        run:
-          curl --proto '=https' --tlsv1.2 -sSf -L
-          https://install.lix.systems/lix | sh -s -- install --no-confirm
-
-      - name: Check ${{ matrix.name }}
         run: |
+          curl --proto '=https' --tlsv1.2 -sSf -L \
+            https://install.lix.systems/lix | sh -s -- install --no-confirm
           sudo tee -a /etc/nix/nix.conf > /dev/null <<EOF
           extra-substituters = https://d17qv3gttz4z4k.cloudfront.net
           extra-trusted-public-keys = gglite-nix-cache-1:Zdz1mEqn//xa8ORxHkc76auwxmX8/6C2K/zWRjmq8Co=
           log-lines = 0
           EOF
+      - name: ${{ matrix.check }}
+        run: |
           nix build -L .#checks.x86_64-linux.${{ matrix.check }}