Merge pull request #224586 from ocfox/checkov-2.3.150

pkgs/development/tools/analysis/checkov/default.nix

@@ -6,16 +6,15 @@
 let
   py = python3.override {
     packageOverrides = self: super: {
-
-      dpath = super.dpath.overridePythonAttrs (oldAttrs: rec {
-        version = "1.5.0";
-        src = oldAttrs.src.override {
-          inherit version;
-          hash = "sha256-SWYVtOqEI20Y4NKGEi3nSGmmDg+H4sfsZ4f/KGxINhs=";
+      cyclonedx-python-lib = super.cyclonedx-python-lib.overridePythonAttrs (oldAttrs: rec {
+        version = "2.7.1";
+        src = fetchFromGitHub {
+          owner = "CycloneDX";
+          repo = "cyclonedx-python-lib";
+          rev = "v${version}";
+          hash = "sha256-c/KhoJOa121/h0n0GUazjUFChnUo05ThD+fuZXc5/Pk=";
         };
-        doCheck = false;
       });
-
     };
   };
 in
@@ -23,14 +22,14 @@ with py.pkgs;
 
 buildPythonApplication rec {
   pname = "checkov";
-  version = "2.3.96";
+  version = "2.3.150";
   format = "setuptools";
 
   src = fetchFromGitHub {
     owner = "bridgecrewio";
     repo = pname;
     rev = "refs/tags/${version}";
-    hash = "sha256-jQ5VaOvJkxhZ0fHrNmkuFK+qmRUNdzR5XCWqWv1iBs4=";
+    hash = "sha256-AgYI3V5xJT6LEZYrJV8nO/86MMp5deuTdLhnUHdrge4=";
   };
 
   patches = [
@@ -38,17 +37,19 @@ buildPythonApplication rec {
   ];
 
   pythonRelaxDeps = [
+    "dpath"
+    "bc-detect-secrets"
     "bc-python-hcl2"
     "pycep-parser"
     "networkx"
   ];
 
-  nativeBuildInputs = with py.pkgs; [
+  nativeBuildInputs = [
     pythonRelaxDepsHook
     setuptools-scm
   ];
 
-  propagatedBuildInputs = with py.pkgs; [
+  propagatedBuildInputs = [
     aiodns
     aiohttp
     aiomultiprocess
@@ -74,6 +75,7 @@ buildPythonApplication rec {
     jsonschema
     junit-xml
     networkx
+    openai
     packaging
     policyuniverse
     prettytable
@@ -87,7 +89,7 @@ buildPythonApplication rec {
     update_checker
   ];
 
-  nativeCheckInputs = with py.pkgs; [
+  nativeCheckInputs = [
     aioresponses
     mock
     pytest-asyncio