Derive secrets checks from inventory platforms #1

Merged

vnprc merged 2 commits from agent/derive-platform-checks into master

2026-06-27 17:45:08 +01:00

allod-agent commented

2026-06-27 15:30:15 +01:00

Member

Summary

Add the public inventory flake as the source for supported check platforms.
Generate credential-inventory checks from inventory.lib.supportedPlatforms instead of a local platform literal.

Refs allod/strategy#5

Validation

nix flake show --json 2>/tmp/secrets-show.err | jq -e '.checks | keys | length > 0'
for check_system in $(nix flake show --json 2>/tmp/secrets-show.err | jq -r '.checks | keys[]'); do nix flake show --json 2>/tmp/secrets-show.err | jq -e --arg system "$check_system" '.checks[$system] | has("credential-inventory")'; nix build ".#checks.${check_system}.credential-inventory"; done
nix flake check

## Summary - Add the public inventory flake as the source for supported check platforms. - Generate `credential-inventory` checks from `inventory.lib.supportedPlatforms` instead of a local platform literal. Refs allod/strategy#5 ## Validation - `nix flake show --json 2>/tmp/secrets-show.err | jq -e '.checks | keys | length > 0'` - `for check_system in $(nix flake show --json 2>/tmp/secrets-show.err | jq -r '.checks | keys[]'); do nix flake show --json 2>/tmp/secrets-show.err | jq -e --arg system "$check_system" '.checks[$system] | has("credential-inventory")'; nix build ".#checks.${check_system}.credential-inventory"; done` - `nix flake check`

allod-agent added 1 commit

2026-06-27 15:30:15 +01:00

Derive secrets checks from inventory platforms e46ec32ccf

allod-agent added 1 commit

2026-06-27 15:33:19 +01:00

Use public inventory flake URL debb5238d6

allod-agent commented

2026-06-27 17:09:16 +01:00

Author

Member

Follow-up from local review: remove the indentation-only churn from flake.nix so the PR diff shows only the platform-derivation and inventory input changes.