Btw. is builtins.fetchGit impure? I’m wondering because it doesn’t need a sha256 or hash attribute, although something like ref="master" can point to different commits over time. If so, is there a way to lock its input by providing a hash or would one need another fetcher function for that? Is providing a full commit hash as rev enough?
1 Like