vestigia

Detect where execution depends on secrets.
git clone git://git.ppad.tech/vestigia.git
Log | Files | Refs | README | LICENSE

commit d782f95f24aa25035b6f67ce3b7508ce4562886c
parent fb627c0089ad2134f20072b1ba531d981cba59bf
Author: Jared Tobin <jared@jtobin.io>
Date:   Mon, 19 Oct 2026 14:21:55 +0400

merge impl/plugin-linux: the plugin on Linux alone

- packages.plugin is exported for Linux systems only: it is built
  against QEMU's user mode, which nixpkgs offers on Linux alone, and
  exporting it everywhere made the flake check fail on Darwin.

Diffstat:
Mflake.nix | 12+++++++++---
1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/flake.nix b/flake.nix @@ -21,9 +21,15 @@ linux = pkgs.stdenv.hostPlatform.isLinux; in { - packages.default = v.vestigia; - packages.include = v.include; - packages.plugin = v.plugin; + packages = { + default = v.vestigia; + include = v.include; + } + # the plugin and the QEMU it loads run Linux guests' user + # mode, which exists on Linux alone + // lib.optionalAttrs linux { + plugin = v.plugin; + }; lib = { inherit (v) traceOf diffOf valgrindDev;