diff --git a/ci/pipelines/post-receive.nix b/ci/pipelines/post-receive.nix index 415f10408..3f14dfade 100644 --- a/ci/pipelines/post-receive.nix +++ b/ci/pipelines/post-receive.nix @@ -2,10 +2,16 @@ let pipeline.steps = [ + { + key = "lint-secrets"; + command = "${pkgs.git-secrets}/bin/git-secrets --scan-history"; + label = ":broom: lint secrets"; + } { key = "build-briefcase"; command = "nix-build . -I briefcase=$(pwd) --no-out-link --show-trace"; label = ":nix: build briefcase"; + depends_on = "lint-secrets"; } { key = "build-socrates"; diff --git a/ci/pipelines/pre-receive.nix b/ci/pipelines/pre-receive.nix deleted file mode 100644 index 9a30f271e..000000000 --- a/ci/pipelines/pre-receive.nix +++ /dev/null @@ -1,11 +0,0 @@ -{ pkgs, ... }: - -let - pipeline.steps = [ - { - key = "lint"; - command = "${pkgs.git-secrets}/bin/git-secrets --scan-history"; - label = ":broom: lint"; - } - ]; -in pkgs.writeText "pipeline.yaml" (builtins.toJSON pipeline)