feat: reviewdog support

.github/workflows/reviewdog.yml

@@ -0,0 +1,30 @@
+name: reviewdog
+on:
+  push:
+    branch-ignore:
+      - "update_flake_lock_action"
+    tags:
+      - "*"
+    paths:
+      - "*"
+  pull_request:
+
+jobs:
+  reviewdog:
+    name: reviewdog
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: reviewdog/action-setup@v1
+        with:
+          reviewdog_version: latest
+      - uses: cachix/install-nix-action@v25
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+      - run: nix profile install nixpkgs#statix nixpkgs#typo
+      - name: Run reviewdog
+        env:
+          REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          reviewdog -reporter=github-pr-review -filter-mode=file -fail-on-error

.reviewdog.yml

@@ -0,0 +1,9 @@
+runner:
+  statix:
+    cmd: statix check -o errfmt | cat
+    errorformat:
+      - "%f>%l:%c:%t:%n:%m"
+    level: warning
+  typos:
+    cmd: typos
+    format: typos

.typos.toml

@@ -0,0 +1,6 @@
+[default]
+[default.extend-words]
+hda = "hda"
+
+[files]
+extend-exclude = ["sops"]