Using an external secret file in a Nix sandboxed build

Just builtins.readFile
It is performed on the evaluation stage, before starting the build (where sandboxing matters)

2 Likes