Merge pull request #1136 from onekey-sec/direnv-to-mkshell

feat(nix): eliminate all sources of `LD_LIBRARY_PATH` poisoning

Author: vlaci

.devenv/.gitkeep

@@ -42,6 +42,4 @@ jobs:
           authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
           extraPullNames: pyperscan
       - run: |
-          nix build -L --option system ${{ matrix.arch }} --extra-platforms ${{ matrix.arch }} .#packages.${{ matrix.arch }}.devenv
-      - run: |
-          nix flake check -L --impure --option system ${{ matrix.arch }} --extra-platforms ${{ matrix.arch }}
+          nix flake check -L --option system ${{ matrix.arch }} --extra-platforms ${{ matrix.arch }}

.github/workflows/build-nix.yml

@@ -9,5 +9,4 @@ build/
 .coverage*
 /.venv
 unblob.log
-/.devenv
 /.direnv