tjh.dev
1{
2 lib,
3 stdenv,
4 fetchFromGitHub,
5 makeWrapper,
6 git,
7 coreutils,
8}:
9
10stdenv.mkDerivation rec {
11 pname = "git-secrets";
12 version = "1.3.0";
13
14 src = fetchFromGitHub {
15 owner = "awslabs";
16 repo = "git-secrets";
17 rev = version;
18 sha256 = "10lnxg0q855zi3d6804ivlrn6dc817kilzdh05mmz8a0ccvm2qc7";
19 };
20
21 nativeBuildInputs = [ makeWrapper ];
22
23 dontBuild = true;
24
25 installPhase = ''
26 install -m755 -Dt $out/bin git-secrets
27 install -m444 -Dt $out/share/man/man1 git-secrets.1
28
29 wrapProgram $out/bin/git-secrets \
30 --prefix PATH : "${
31 lib.makeBinPath [
32 git
33 coreutils
34 ]
35 }"
36 '';
37
38 meta = with lib; {
39 description = "Prevents you from committing secrets and credentials into git repositories";
40 homepage = "https://github.com/awslabs/git-secrets";
41 license = licenses.asl20;
42 platforms = platforms.all;
43 mainProgram = "git-secrets";
44 };
45}