Nix Skill

1. nix build

• YOU MUST: Always use

  --no-link

  option with

  nix build

  sh

  nix build .#rumdl --no-link

• IMPORTANT: Without

  --no-link

  , a

  ./result

  symlink is created

2. nix run

• IMPORTANT: Packages registered in packages can be run with

  nix run

  sh

  nix run .#pike -- scan -d ./terraform

3. Adding Custom Packages

• YOU MUST: See CONTRIBUTING.md section 1.4.2 for adding new custom packages
• IMPORTANT: Hash acquisition flow
  1. Get

     hash

     using nurl:

     nurl https://github.com/<owner>/<repo> <tag>

  2. Get

     vendorHash

     /

     cargoHash

     via build error (

     got:

     line)
• IMPORTANT: Add

  doCheck = false;

  if tests fail

4. nurl

• IMPORTANT: nurl generates Nix fetcher calls from repository URLs
  sh

  nurl https://github.com/rvben/rumdl v0.0.206

• IMPORTANT: Output can be used directly in fetchFromGitHub
  nix

  fetchFromGitHub {
    owner = "rvben";
    repo = "rumdl";
    rev = "v0.0.206";
    hash = "sha256-XXX...";
  }

• IMPORTANT: For cargoHash/vendorHash, use build error method (nurl does not support these)