mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-12-19 12:14:10 +00:00
33afbf39f6
checkInputs used to be added to nativeBuildInputs. Now we have nativeCheckInputs to do that instead. Doing this treewide change allows to keep hashes identical to before the introduction of nativeCheckInputs.
47 lines
1.0 KiB
Nix
47 lines
1.0 KiB
Nix
{ lib
|
|
, fetchFromGitHub
|
|
, coccinelle
|
|
, gnugrep
|
|
, python3
|
|
}:
|
|
|
|
python3.pkgs.buildPythonApplication rec {
|
|
pname = "cvehound";
|
|
version = "1.1.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "evdenis";
|
|
repo = "cvehound";
|
|
rev = "refs/tags/${version}";
|
|
hash = "sha256-4+0Virpsq4mwOIpostS87VYTX8hsumXEL1w8FiOrNtA=";
|
|
};
|
|
|
|
makeWrapperArgs = [
|
|
"--prefix PATH : ${lib.makeBinPath [ coccinelle gnugrep ]}"
|
|
];
|
|
|
|
propagatedBuildInputs = with python3.pkgs; [
|
|
lxml
|
|
setuptools
|
|
sympy
|
|
];
|
|
|
|
nativeCheckInputs = with python3.pkgs; [
|
|
gitpython
|
|
psutil
|
|
pytestCheckHook
|
|
];
|
|
|
|
# Tries to clone the kernel sources
|
|
doCheck = false;
|
|
|
|
meta = with lib; {
|
|
description = "Tool to check linux kernel source dump for known CVEs";
|
|
homepage = "https://github.com/evdenis/cvehound";
|
|
changelog = "https://github.com/evdenis/cvehound/blob/${src.rev}/ChangeLog";
|
|
# See https://github.com/evdenis/cvehound/issues/22
|
|
license = with licenses; [ gpl2Only gpl3Plus ];
|
|
maintainers = with maintainers; [ ambroisie ];
|
|
};
|
|
}
|