if [[ $TRAVIS_SECURE_ENV_VARS == "true" ]]; then

openssl aes-256-cbc -k "$secrets_password" -in secrets.tar.enc -out secrets.tar -d;

tar xvf secrets.tar;

if [[ $TRAVIS_SECURE_ENV_VARS == "true" ]]; then

source ${TRAVIS_BUILD_DIR}/testing/resources/test-env.sh;

nox --stop-on-first-error -s lint travis;

# only run lint on external PRs

echo 'External PR: only running lint.'

nox --stop-on-first-error -s lint;