Use .gitignore in nix build excludes

This avoid building with wrong pre-built data locally as well as in CI.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

Author: saschagrunert

nix/derivation-bpf.nix

@@ -1,7 +1,8 @@
 { pkgs, buildGoModule, arch ? "x86" }:
 with pkgs; buildGo122Module rec {
   name = "security-profiles-operator";
-  src = ./..;
+  # Use Pure to avoid exuding the .git directory
+  src = nix-gitignore.gitignoreSourcePure [ ../.gitignore ] ./..;
   vendorHash = null;
   doCheck = false;
   outputs = [ "out" ];

nix/derivation.nix

@@ -1,7 +1,8 @@
 { pkgs, buildGoModule }:
 with pkgs; buildGo122Module rec {
   name = "security-profiles-operator";
-  src = ./..;
+  # Use Pure to avoid exuding the .git directory
+  src = nix-gitignore.gitignoreSourcePure [ ../.gitignore ] ./..;
   vendorHash = null;
   doCheck = false;
   outputs = [ "out" ];