{ pkgs ? import <nixpkgs> {} }:

 pkgs.mkShell {
   packages = with pkgs; [
      # linters/typos/etc.
      pre-commit
      typos
      detect-secrets
      gitleaks

      # encrypting secrets
      agebox
   ];
}