CI should fail on your machine first
blog.nix-ci.com