ff1a94e523
The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
64 lines
1.2 KiB
Nix
64 lines
1.2 KiB
Nix
{ lib
|
|
, python3Packages
|
|
, fetchPypi
|
|
, nix
|
|
, ronn
|
|
}:
|
|
|
|
python3Packages.buildPythonApplication rec {
|
|
pname = "vulnix";
|
|
version = "1.10.1";
|
|
|
|
src = fetchPypi {
|
|
inherit pname version;
|
|
sha256 = "07v3ddvvhi3bslwrlin45kz48i3va2lzd6ny0blj5i2z8z40qcfm";
|
|
};
|
|
|
|
postPatch = ''
|
|
substituteInPlace setup.cfg \
|
|
--replace "--flake8" ""
|
|
'';
|
|
|
|
outputs = [ "out" "doc" "man" ];
|
|
nativeBuildInputs = [ ronn ];
|
|
|
|
nativeCheckInputs = with python3Packages; [
|
|
freezegun
|
|
pytest
|
|
pytest-cov
|
|
];
|
|
|
|
propagatedBuildInputs = [
|
|
nix
|
|
] ++ (with python3Packages; [
|
|
click
|
|
colorama
|
|
pyyaml
|
|
requests
|
|
setuptools
|
|
toml
|
|
zodb
|
|
]);
|
|
|
|
postBuild = "make -C doc";
|
|
|
|
checkPhase = "py.test src/vulnix";
|
|
|
|
postInstall = ''
|
|
install -D -t $doc/share/doc/vulnix README.rst CHANGES.rst
|
|
gzip $doc/share/doc/vulnix/*.rst
|
|
install -D -t $man/share/man/man1 doc/vulnix.1
|
|
install -D -t $man/share/man/man5 doc/vulnix-whitelist.5
|
|
'';
|
|
|
|
dontStrip = true;
|
|
|
|
meta = with lib; {
|
|
description = "NixOS vulnerability scanner";
|
|
mainProgram = "vulnix";
|
|
homepage = "https://github.com/flyingcircusio/vulnix";
|
|
license = licenses.bsd3;
|
|
maintainers = with maintainers; [ ckauhaus ];
|
|
};
|
|
}
|