fodwatch

Job #28230: /nix/store/lpmckj54x3wbrrq59blb9iv243a29z7b-source.drv

Hash mismatch
Evaluation: #1
Time: 2023-05-19 07:05Z - 2023-05-19 07:05Z (1.086 s)
Package: python310Packages.detect-secrets
Maintainers:
out path: /nix/store/p0pgaqgfdnl99i4x4w4sfzc098d42hkh-source
drv path: /nix/store/lpmckj54x3wbrrq59blb9iv243a29z7b-source.drv
Expected hash: r:sha256 e8498be973f24aa700dc403e14591fc3b0e4c65e4bbf2068ac8c3485eb15e5e5
Actual hash: sha256-rkLDvf0Syt/xent2aPixS9y6MNMR+EuSMCh2hFDmP+I=
rev: v1.4.0
url: https://github.com/Yelp/detect-secrets.git

Partial build log

this derivation will be built:
  /nix/store/i2n75g223ingmdnx1ly2mxp94q3qz3fp-source.drv
building '/nix/store/99s7xmfqlingz3az2vigr83gsai4r8i0-source.drv'...
source> exporting https://github.com/Yelp/detect-secrets.git (rev v1.4.0) into /nix/store/p0pgaqgfdnl99i4x4w4sfzc098d42hkh-source
source> Initialized empty Git repository in /nix/store/p0pgaqgfdnl99i4x4w4sfzc098d42hkh-source/.git/
source> remote: Enumerating objects: 230, done.
source> remote: Counting objects: 100% (230/230), done.
source> remote: Compressing objects: 100% (219/219), done.
source> remote: Total 230 (delta 8), reused 101 (delta 3), pack-reused 0
source> Receiving objects: 100% (230/230), 332.91 KiB | 4.06 MiB/s, done.
source> Resolving deltas: 100% (8/8), done.
source> From https://github.com/Yelp/detect-secrets
source>  * tag               v1.4.0     -> FETCH_HEAD
source> Switched to a new branch 'fetchgit'
source> Enumerating objects: 229, done.
source> Counting objects: 100% (229/229), done.
source> Compressing objects: 100% (221/221), done.
source> Writing objects: 100% (229/229), done.
source> Total 229 (delta 10), reused 219 (delta 0), pack-reused 0
source> Enumerating objects: 229, done.
source> Nothing new to pack.
error: hash mismatch in fixed-output derivation '/nix/store/99s7xmfqlingz3az2vigr83gsai4r8i0-source.drv':
         specified: sha256-6EmL6XPySqcA3EA+FFkfw7Dkxl5LvyBorIw0hesV5eU=
            got:    sha256-rkLDvf0Syt/xent2aPixS9y6MNMR+EuSMCh2hFDmP+I=
error: 

Reproducer

Warning: This reproducer script contains many hidden assumptions (e.g. no postFetch hooks, no fetchgit, etc). Do not trust its output blindly.