diff --git a/pkgs/tools/security/deepsecrets/default.nix b/pkgs/tools/security/deepsecrets/default.nix
index 1238d51b23bc..7936c303b7e0 100644
--- a/pkgs/tools/security/deepsecrets/default.nix
+++ b/pkgs/tools/security/deepsecrets/default.nix
@@ -1,5 +1,6 @@
 {
   lib,
+  stdenv,
   python3,
   fetchFromGitHub,
 }:
@@ -22,9 +23,7 @@ python3.pkgs.buildPythonApplication rec {
     "mmh3"
   ];
 
-  build-system = with python3.pkgs; [
-    poetry-core
-  ];
+  build-system = with python3.pkgs; [ poetry-core ];
 
   dependencies = with python3.pkgs; [
     dotwiz
@@ -36,13 +35,7 @@ python3.pkgs.buildPythonApplication rec {
     regex
   ];
 
-  pythonImportsCheck = [
-    "deepsecrets"
-  ];
-
-  nativeCheckInputs = with python3.pkgs; [
-    pytestCheckHook
-  ];
+  nativeCheckInputs = with python3.pkgs; [ pytestCheckHook ];
 
   disabledTests = [
     # assumes package is built in /app (docker?), and not /build/${src.name} (nix sandbox)
@@ -51,12 +44,15 @@ python3.pkgs.buildPythonApplication rec {
     "test_basic_info"
   ];
 
+  pythonImportsCheck = [ "deepsecrets" ];
+
   meta = {
     description = "Secrets scanner that understands code";
-    mainProgram = "deepsecrets";
     homepage = "https://github.com/avito-tech/deepsecrets";
     changelog = "https://github.com/avito-tech/deepsecrets/releases/tag/v${version}";
     license = lib.licenses.mit;
     maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "deepsecrets";
+    broken = stdenv.hostPlatform.isDarwin;
   };
 }