1{ lib, stdenv, fetchFromGitHub, makeWrapper, git, coreutils }:
2
3stdenv.mkDerivation rec {
4 pname = "git-secrets";
5 version = "1.3.0";
6
7 src = fetchFromGitHub {
8 owner = "awslabs";
9 repo = "git-secrets";
10 rev = version;
11 sha256 = "10lnxg0q855zi3d6804ivlrn6dc817kilzdh05mmz8a0ccvm2qc7";
12 };
13
14 nativeBuildInputs = [ makeWrapper ];
15
16 dontBuild = true;
17
18 installPhase = ''
19 install -m755 -Dt $out/bin git-secrets
20 install -m444 -Dt $out/share/man/man1 git-secrets.1
21
22 wrapProgram $out/bin/git-secrets \
23 --prefix PATH : "${lib.makeBinPath [ git coreutils ]}"
24 '';
25
26 meta = with lib; {
27 description = "Prevents you from committing secrets and credentials into git repositories";
28 homepage = "https://github.com/awslabs/git-secrets";
29 license = licenses.asl20;
30 platforms = platforms.all;
31 };
32}