~fgaz/nixpkgs-find-untrusted-git-hashes