Grahamc/init pullout

.editorconfig

@@ -0,0 +1,21 @@
+# EditorConfig configuration for flakehub-cache-types
+
+# Top-most EditorConfig file
+root = true
+
+# Unix-style newlines with a newline ending every file, utf-8 charset
+[*]
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+charset = utf-8
+
+# Rust
+[*.rs]
+indent_style = space
+indent_size = 4
+
+# Misc
+[*.{yaml,yml,md,nix,toml}]
+indent_style = space
+indent_size = 2

.envrc

@@ -0,0 +1 @@
+use flake

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: cargo
+    directory: /
+    schedule:
+      interval: weekly
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/ci.yml

@@ -0,0 +1,56 @@
+name: CI
+
+on:
+  pull_request:
+  merge_group:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  checks:
+    name: Nix checks (${{ matrix.os }})
+    permissions:
+      contents: read
+      # For flakehub-cache-action
+      id-token: write
+    strategy:
+      matrix:
+        os:
+          - ubuntu-latest
+          - macos-latest
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
+      - uses: DeterminateSystems/flakehub-cache-action@main
+      - name: Build, test, clippy, rustfmt
+        run: nix flake check -L
+      - name: Check editorconfig conformance
+        run: nix develop --command editorconfig-checker
+
+  cargo-deny:
+    name: Advisories, licenses, sources
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      # For flakehub-cache-action
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+        with:
+          determinate: true
+      - uses: DeterminateSystems/flakehub-cache-action@main
+      - run: nix develop --command cargo deny check
+
+  flake-checker:
+    name: Check flake.lock health
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/flake-checker-action@main

.gitignore

@@ -0,0 +1,5 @@
+.direnv
+
+/target
+result
+result-*