Skip to content

Address challenge feedback from Discord #1040

Address challenge feedback from Discord

Address challenge feedback from Discord #1040

name: Check Encryption
on:
push:
branches: [ main, master ]
pull_request:
jobs:
check-encryption:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: ./.github/actions/setup-nix
- name: Ensure tests_private files are encrypted
shell: 'nix shell nixpkgs#git nixpkgs#git-crypt --command bash --noprofile --norc -euo pipefail {0}'
run: |
unencrypted=$(git crypt status | grep tests_private | grep "^not" || true)
if [ -n "$unencrypted" ]; then
echo "::error::Unencrypted tests_private files detected:"
echo "$unencrypted"
exit 1
fi