ff1a94e523
The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
87 lines
1.8 KiB
Nix
87 lines
1.8 KiB
Nix
{ lib
|
|
, fetchFromGitHub
|
|
, git
|
|
, python3
|
|
}:
|
|
|
|
python3.pkgs.buildPythonApplication rec {
|
|
pname = "ggshield";
|
|
version = "1.25.0";
|
|
pyproject = true;
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "GitGuardian";
|
|
repo = "ggshield";
|
|
rev = "refs/tags/v${version}";
|
|
hash = "sha256-D6+0ZYuOiCy5LonP1Ob7PlWmBXvLwU3PODOT6F+70HY=";
|
|
};
|
|
|
|
pythonRelaxDeps = true;
|
|
|
|
nativeBuildInputs = with python3.pkgs; [
|
|
pythonRelaxDepsHook
|
|
setuptools
|
|
];
|
|
|
|
propagatedBuildInputs = with python3.pkgs; [
|
|
appdirs
|
|
charset-normalizer
|
|
click
|
|
cryptography
|
|
marshmallow
|
|
marshmallow-dataclass
|
|
oauthlib
|
|
platformdirs
|
|
pygitguardian
|
|
pyjwt
|
|
python-dotenv
|
|
pyyaml
|
|
requests
|
|
rich
|
|
];
|
|
|
|
nativeCheckInputs = [
|
|
git
|
|
] ++ (with python3.pkgs; [
|
|
jsonschema
|
|
pyfakefs
|
|
pytest-mock
|
|
pytest-voluptuous
|
|
pytestCheckHook
|
|
snapshottest
|
|
vcrpy
|
|
]);
|
|
|
|
pythonImportsCheck = [
|
|
"ggshield"
|
|
];
|
|
|
|
disabledTestPaths = [
|
|
# Don't run functional tests
|
|
"tests/functional/"
|
|
];
|
|
|
|
disabledTests = [
|
|
# No TLS certificate, no .git folder, etc.
|
|
"test_cache_catches"
|
|
"test_is_git_dir"
|
|
"test_is_valid_git_commit_ref"
|
|
"test_check_git_dir"
|
|
"test_does_not_fail_if_cache"
|
|
# Encoding issues
|
|
"test_file_decode_content"
|
|
"test_file_is_longer_than_does_not_read_utf8_file"
|
|
"test_file_is_longer_using_8bit_codec"
|
|
"test_generate_files_from_paths"
|
|
];
|
|
|
|
meta = with lib; {
|
|
description = "Tool to find and fix various types of hardcoded secrets and infrastructure-as-code misconfigurations";
|
|
mainProgram = "ggshield";
|
|
homepage = "https://github.com/GitGuardian/ggshield";
|
|
changelog = "https://github.com/GitGuardian/ggshield/blob/${version}/CHANGELOG.md";
|
|
license = licenses.mit;
|
|
maintainers = with maintainers; [ fab ];
|
|
};
|
|
}
|