From 6815dc1fde9d727c275955e74ae7a3fe21105e3f Mon Sep 17 00:00:00 2001
From: Andrew Jackson <andrew.jackson@supabase.io>
Date: Wed, 11 Nov 2026 09:20:41 -0600
Subject: [PATCH] chore: add flake.lock check

---
 .github/workflows/main.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index eabe029..8d2602c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -17,13 +17,17 @@ jobs:
 
       - name: Install Nix
         uses: cachix/install-nix-action@c134e4c9e34bac6cab09cf239815f9339aaaf84e # v31.5.1
-
       - name: Use Cachix Cache
         uses: cachix/cachix-action@3ba601ff5bbb07c7220846facfa2cd81eeee15a1 # v16
         with:
           name: nxpg
           authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
 
+      - name: Check flake.lock/flake.nix for drift
+        run: |
+          nix flake update
+          git diff --exit-code
+
       - name: Build
         run: nix-shell --argstr pgVersion "${{ matrix.pg-version }}" --arg cassert true --run "xpg -v ${{ matrix.pg-version }} build"