check-world: add comparse, DY*, mls-star

.github/workflows/check-world.yml

@@ -689,3 +689,72 @@ jobs:
 
       - name: Build
         run: make -C mitls-fstar/src/tls -skj$(nproc) test
+
+
+  ### Nix jobs, for some Inria projects
+  #
+  # NOTE: these jobs are not containerized
+  # 1- it should not be needed since Nix takes care of isolating the environment
+  # 2- it would actually fail to setup Nix due to permissions in the container, and I haven't
+  #    found a clear reference on what the permissions/uids should be.
+  #
+  # The fstar-nix job is here to
+  # 1- Test the nix build in this workflow too
+  # 2- Reuse the built F* in the following projects, via the magic-nix-cache (note the 'needs')
+
+  fstar-nix:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: DeterminateSystems/nix-installer-action@main
+    - uses: DeterminateSystems/magic-nix-cache-action@main
+    - name: Build
+      run: nix build -L
+
+  comparse:
+    needs: fstar-nix
+    runs-on: ubuntu-latest
+    steps:
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+
+      - uses: actions/checkout@master
+        with:
+          repository: TWal/comparse
+
+      - name: Update fstar flake and check
+        run: |
+          nix flake update --override-input fstar-flake "github:${{github.repository}}?rev=${{github.sha}}"
+          nix flake check
+
+  dy-star:
+    needs: fstar-nix
+    runs-on: ubuntu-latest
+    steps:
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+
+      - uses: actions/checkout@master
+        with:
+          repository: REPROSEC/dolev-yao-star-extrinsic
+
+      - name: Update fstar flake and check
+        run: |
+          nix flake update --override-input fstar-flake "github:${{github.repository}}?rev=${{github.sha}}"
+          nix flake check
+
+  mls-star:
+    needs: fstar-nix
+    runs-on: ubuntu-latest
+    steps:
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+
+      - uses: actions/checkout@master
+        with:
+          repository: Inria-Prosecco/mls-star
+
+      - name: Update fstar flake and check
+        run: |
+          nix flake update --override-input fstar-flake "github:${{github.repository}}?rev=${{github.sha}}"
+          nix flake check