From 443a10d73851b635f3436d5d06520a80f75f7f1b Mon Sep 17 00:00:00 2001
From: Bryan Bennett <Bryan.Bennett@proton.me>
Date: Sat, 13 Jan 2024 09:32:09 -0500
Subject: [PATCH] Add github workflow to proxy tests from sr.ht

---
 .github/workflows/repo-lockdown.yml | 16 ++++++++++++++++
 .github/workflows/test.yml          | 14 ++++++++++++++
 2 files changed, 30 insertions(+)
 create mode 100644 .github/workflows/repo-lockdown.yml
 create mode 100644 .github/workflows/test.yml

diff --git a/.github/workflows/repo-lockdown.yml b/.github/workflows/repo-lockdown.yml
new file mode 100644
index 0000000..e513c4f
--- /dev/null
+++ b/.github/workflows/repo-lockdown.yml
@@ -0,0 +1,16 @@
+name: "Repo Lockdown"
+
+on:
+  pull_request_target:
+    types: 'opened'
+
+permissions:
+  pull-requests: write
+
+jobs:
+  action:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dessant/repo-lockdown@v4
+        with:
+          pr-comment: "This repo does not accept pull requests as it is a mirror. Please instead submit patches to https://sr.ht/~bryan_bennett/flake_env."
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
new file mode 100644
index 0000000..3d7a1b5
--- /dev/null
+++ b/.github/workflows/test.yml
@@ -0,0 +1,14 @@
+name: "Test"
+on:
+  pull_request:
+  push:
+jobs:
+  tests:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: cachix/install-nix-action@v25
+      with:
+        github_access_token: ${{ secrets.GITHUB_TOKEN }}
+    - run: nix build
+    - run: nix flake check --all-systems --keep-going