{ ejson2env, runCommand }:
runCommand "check-ejson2env.sh" {
  nativeBuildInputs = [ ejson2env ];
} ''
  cat > $TMP/abc.ejson <<EOF
    {
      "_public_key": "349a0e027725db0693cf0505344c5104807d38fb398cd4597029dccc8d0d8711",
      "environment": {
        "foo": "EJ[1:7oqIDkyXLro12rcrg7/psjK5Qcfuw5FRquvfBaRUBic=:OTtncVl0wT4U6UWdxoaCGBRnM2WzGnV3:1FiIgHYT5U6MjFN8IUU83T1fzQ==]"
      }
    }
EOF
  response="$(echo "ff34961809e9d7a0ae20b9d09e5d8630c8d4924cef19cdb5385916b9be019954" | ejson2env --key-from-stdin $TMP/abc.ejson)"
  if [[ "$response" != "export foo=bar" ]]; then
    echo "test file not decrypted correctly"
    exit 1
  fi
  touch $out
''