feat: wip

Author: ferrarimarco

.github/dependabot.yaml

@@ -19,6 +19,7 @@ updates:
         applies-to: version-updates
         patterns:
           - actions/*
+          - cachix/install-nix-action
           - docker/*
           - github/*
           - googleapis/*

.github/workflows/nix.yaml

@@ -0,0 +1,41 @@
+---
+name: Build and check Nix config
+
+on: # yamllint disable-line rule:truthy
+  push:
+    paths:
+      - ".github/workflows/nix.yaml"
+      - "config/nix/**"
+  pull_request:
+    paths:
+      - ".github/workflows/nix.yaml"
+      - "config/nix/**"
+  workflow_call: null
+
+permissions:
+  contents: read
+
+jobs:
+  test-nix-config:
+    concurrency:
+      # Ref: https://docs.github.com/en/actions/learn-github-actions/contexts#github-context
+      # github.head_ref: head_ref or source branch of the pull request
+      # github.ref: ref of the branch that triggered the workflow
+      group: ${{ github.workflow }}-test-nix-config-${{ github.head_ref || github.ref }}-${{ github.event_name }}
+      cancel-in-progress: true
+    permissions:
+      contents: read
+      packages: read
+      statuses: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install nix
+        uses: cachix/install-nix-action@96951a368ba55167b55f1c916f7d416bac6505fe # v31.10.2
+        with:
+          enable_kvm: true
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - run: nix build
+      - run: nix flake check
+      - run: nix-shell --run "echo OK"

config/lint/super-linter.env

@@ -7,6 +7,7 @@ GITLEAKS_LOG_LEVEL=warn
 IGNORE_GITIGNORED_FILES=true
 LINTER_RULES_PATH=config/lint
 MARKDOWN_CONFIG_FILE=.markdown-lint.yaml
+REMOVE_ANSI_COLOR_CODES_FROM_OUTPUT=true
 SAVE_SUPER_LINTER_OUTPUT=true
 SAVE_SUPER_LINTER_SUMMARY=true
 VALIDATE_ALL_CODEBASE=true