Merge pull request #212 from nialov/feat-add-sops-pre-commit

Add pre-commit-hook-ensure-sops
cachix · Jul 18, 2023 · eb433bf · eb433bf
2 parents 87589fa + f189105
commit eb433bf
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 3 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/modules/hooks.nix b/modules/hooks.nix
@@ -1024,6 +1024,20 @@ in
             "${binPath} ${lib.optionalString write "--write"} ${lib.optionalString (output != null) "--${output}"} --ignore-unknown";
           types = [ "text" ];
         };
+      pre-commit-hook-ensure-sops = {
+        name = "pre-commit-hook-ensure-sops";
+        entry =
+          ## NOTE: pre-commit-hook-ensure-sops landed in nixpkgs on 8 July 2022. Once it reaches a
+          ## release of NixOS, the `throwIf` piece of code below will become
+          ## useless.
+          lib.throwIf
+            (tools.pre-commit-hook-ensure-sops == null)
+            "The version of nixpkgs used by pre-commit-hooks.nix does not have the `pre-commit-hook-ensure-sops` package. Please use a more recent version of nixpkgs."
+            ''
+              ${tools.pre-commit-hook-ensure-sops}/bin/pre-commit-hook-ensure-sops
+            '';
+        files = lib.mkDefault "^secrets";
+      };
       hunspell =
         {
           name = "hunspell";

diff --git a/nix/tools.nix b/nix/tools.nix
@@ -41,6 +41,7 @@
 , opam
 , ormolu
 , pkgsBuildBuild
+, pre-commit-hook-ensure-sops ? null
 , python39Packages
 , ruff ? null
 , runCommand
@@ -100,6 +101,7 @@ in
     nixpkgs-fmt
     opam
     ormolu
+    pre-commit-hook-ensure-sops
     revive
     ruff
     rustfmt