mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-01-06 04:53:27 +00:00
ff1a94e523
The nixpkgs-unstable channel's programs.sqlite was used to identify packages producing exactly one binary, and these automatically added to their package definitions wherever possible.
62 lines
1.3 KiB
Nix
62 lines
1.3 KiB
Nix
{ lib
|
|
, fetchFromGitHub
|
|
, makeWrapper
|
|
, python3
|
|
}:
|
|
|
|
python3.pkgs.buildPythonApplication rec {
|
|
pname = "zircolite";
|
|
version = "2.10.0";
|
|
format = "other";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "wagga40";
|
|
repo = "Zircolite";
|
|
rev = "refs/tags/${version}";
|
|
hash = "sha256-r5MIoP+6CnAGsOtK4YLshLBVSZN2NVrwnkuHHDdLZrQ=";
|
|
};
|
|
|
|
__darwinAllowLocalNetworking = true;
|
|
|
|
nativeBuildInputs = [
|
|
makeWrapper
|
|
];
|
|
|
|
propagatedBuildInputs = with python3.pkgs; [
|
|
aiohttp
|
|
colorama
|
|
elastic-transport
|
|
elasticsearch
|
|
evtx
|
|
jinja2
|
|
lxml
|
|
orjson
|
|
requests
|
|
tqdm
|
|
urllib3
|
|
xxhash
|
|
] ++ elasticsearch.optional-dependencies.async;
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
|
|
mkdir -p $out/bin $out/share $out/share/zircolite
|
|
cp -R . $out/share/zircolite
|
|
|
|
makeWrapper ${python3.interpreter} $out/bin/zircolite \
|
|
--set PYTHONPATH "$PYTHONPATH:$out/bin/zircolite.py" \
|
|
--add-flags "$out/share/zircolite/zircolite.py"
|
|
|
|
runHook postInstall
|
|
'';
|
|
|
|
meta = with lib; {
|
|
description = "SIGMA-based detection tool for EVTX, Auditd, Sysmon and other logs";
|
|
mainProgram = "zircolite";
|
|
homepage = "https://github.com/wagga40/Zircolite";
|
|
changelog = "https://github.com/wagga40/Zircolite/releases/tag/${version}";
|
|
license = licenses.gpl3Only;
|
|
maintainers = with maintainers; [ fab ];
|
|
};
|
|
}
|