From 8b4e0dbf2e336a3072508989207779e4de93bccd Mon Sep 17 00:00:00 2001
From: Vincent Ambo <mail@tazj.in>
Date: Wed, 8 Sep 2021 18:28:19 +0300
Subject: feat(depot): Prevent imports from NIX_PATH within the depot

Provided without further comment.

Change-Id: I19d14530243c72d49b14526f769b964b06959db8
Reviewed-on: https://cl.tvl.fyi/c/depot/+/3500
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
Reviewed-by: grfn <grfn@gws.fyi>
---
 default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/default.nix b/default.nix
index bb9bc703bf..77fb4ae544 100644
--- a/default.nix
+++ b/default.nix
@@ -60,6 +60,9 @@ let
       args = depotArgs;
       path = ./.;
       filter = depotArgsFilter;
+      scopedArgs = {
+        __findFile = _: _: throw "Do not import from NIX_PATH in the depot!";
+      };
     };
 
   # To determine build targets, we walk through the depot tree and
-- 
cgit 1.4.1