Xinglu Chen schreef op di 08-06-2021 om 17:40 [+0200]: > Using ‘call-with-output-file*’ instead of ‘call-with-output-file’ and ‘chmod’ > will prevent secrets from being leaked. See > ;. This procedure LGTM (but I didn't test). However, > diff --git a/guix/build/utils.scm b/guix/build/utils.scm > index 419c10195b..df960eee84 100644 > --- a/guix/build/utils.scm > +++ b/guix/build/utils.scm > @@ -5,6 +5,7 @@ Modifying (guix build utils) entails a world-rebuild, as (guix build utils) is used by the build code of practically every package. I would suggest placing it in (gnu build activation) instead. Greetings, Maxime.