let
  sources = import ../../npins;
  inherit (sources) agenix;
  inherit (agenix.repository) owner repo;
in
  final: _: {
    # Use flake so the package inputs is pinned
    agenix = (builtins.getFlake "github:${owner}/${repo}/${agenix.revision}").packages.${final.system}.default;
  }