[anttiharju]

Second the Nix approach. One can even build a github actions-compatible container out of a flake and have actions run in it. I have done so for my personal projects https://github.com/anttiharju/compare-changes

[dfee]

isn't this better served with something like Bazel (behind Nix of course?)

[anttiharju]

Could be, not familiar with Bazel. Thanks for mentioning it now can check it out.