Ugh, nix-shell and friends pull in a bunch of junk like dhall-to-json for the cachix key.
Instead, GH should have an 'age' key and sops-nix should be used to make the secrets available (either via the activation script manually, which I've used previously, or maybe via the HM module)
Ugh,
nix-shell
and friends pull in a bunch of junk likedhall-to-json
for the cachix key.Instead, GH should have an 'age' key and
sops-nix
should be used to make the secrets available (either via the activation script manually, which I've used previously, or maybe via the HM module)