pipeline:
  check:
    image: nixpkgs/nix-flakes:latest
    pull: true
    secrets: [ sourcehut_token ]
    commands:
      - nix --no-sandbox flake info
      - nix --no-sandbox develop -c statix check