From the highly eclectic blog of Mark Dominus| The Universe of Discourse: category 'prog/git'
derivation attrsderivation is described in| nix.dev
The fact that tj-actions/changed-files was compromised is kind of old news at this point, but I had an insight the other day about this problem and its remediation that I haven't seen mentioned yet.| hoelz.ro
<object> | git-scm.com