git-filter for codeship jet command (doesn't work because 'jet encrypt' is not deterministic)

.git-config

# NOTE .git/config not .git-config, but github gist doesn't allow slash

[filter "jet"]
        clean = \"$(git rev-parse --git-common-dir)\"/../git-filter-jet-clean %f
        smudge = \"$(git rev-parse --git-common-dir)\"/../git-filter-jet-smudge
        required = true
[diff "jet"]
        textconv = \"$(git rev-parse --git-common-dir)\"/../git-filter-jet-textconv
        cachetextconv = true
        binary = true

.gitattributes

/codeship-env/*.encrypted filter=jet diff=jet

git-filter-jet-clean

#!/usr/bin/env bash
filename=$1

tempfile=$(mktemp 2>/dev/null || mktemp -t tmp)
tempfile2=$(mktemp 2>/dev/null || mktemp -t tmp)
trap 'rm -f "$tempfile" "$tempfile2"' EXIT
tee "$tempfile" &>/dev/null

if [[ -s $filename ]]; then
  read -n 11 firstbytes <"$tempfile"
  if [[ $firstbytes == "codeship:v2" ]]; then
    cat "$tempfile"
  elif [[ ! -e codeship.aes ]]; then
    cat "$tempfile"
  else
    jet encrypt "$filename" "$tempfile2"
    cat "$tempfile2"
  fi
fi

git-filter-jet-smudge

#!/usr/bin/env bash
filename=$1

tempfile=$(mktemp 2>/dev/null || mktemp -t tmp)
tempfile2=$(mktemp 2>/dev/null || mktemp -t tmp)
trap 'rm -f "$tempfile" "$tempfile2"' EXIT
tee "$tempfile" &>/dev/null

read -n 11 firstbytes <"$tempfile"
if [[ $firstbytes != "codeship:v2" ]]; then
  cat "$tempfile"
elif [[ ! -e codeship.aes ]]; then
  cat "$tempfile"
else
  jet decrypt "$tempfile" "$tempfile2"
  cat "$tempfile2"
fi

git-filter-jet-textconv

#!/usr/bin/env bash
filename=$1

tempfile=$(mktemp 2>/dev/null || mktemp -t tmp)
tempfile2=$(mktemp 2>/dev/null || mktemp -t tmp)
trap 'rm -f "$tempfile" "$tempfile2"' EXIT
cat "$filename" | tee "$tempfile" &>/dev/null

if [[ -s $filename ]]; then
  if [[ ! -e codeship.aes ]]; then
    cat "$tempfile"
  else
    jet decrypt "$tempfile" "$tempfile2"
    cat "$tempfile2"
  fi
fi