users/wpcarro/ci/pipelines/post-receive.nix


1
2
3
4
5
6
7
8
9
10
11
12
13

{ pkgs, depot, ... }:

let
  inherit (builtins) path toJSON;

  pipeline.steps = [
    {
      key = "lint-secrets";
      command = "${pkgs.git-secrets}/bin/git-secrets --scan-history";
      label = ":broom: lint secrets";
    }
  ];
in pkgs.writeText "pipeline.yaml" (toJSON pipeline)