scorecard: 4.12.0 -> 4.13.1

This commit is contained in:
Arnout Engelen 2024-05-29 12:36:12 +02:00
parent bfb7a88267
commit 5b52f8bfda
No known key found for this signature in database
GPG Key ID: 061107B0F74A6DAA

View File

@ -8,13 +8,13 @@
buildGoModule rec {
pname = "scorecard";
version = "4.12.0";
version = "4.13.1";
src = fetchFromGitHub {
owner = "ossf";
repo = pname;
rev = "v${version}";
sha256 = "sha256-Ys7uO+xMSlcD8OGw7fV+aR0+Q1UXrxPKVLQbphV4rKk=";
hash = "sha256-xf6HyiZlkU9ifgXr+/O8UeElqwF8c1h/9IRWDVHx2+g=";
# populate values otherwise taken care of by goreleaser,
# unfortunately these require us to use git. By doing
# this in postFetch we can delete .git afterwards and
@ -28,7 +28,7 @@ buildGoModule rec {
find "$out" -name .git -print0 | xargs -0 rm -rf
'';
};
vendorHash = "sha256-L6HFZryniy3Gp8NKdjM4SK82ZG5eQPM7blkSE3YFhOw=";
vendorHash = "sha256-ohZcz7fn/YAglLI3YOi0J4FWkCJa2/nsM7T03+BOWkw=";
nativeBuildInputs = [ installShellFiles ];
@ -58,6 +58,11 @@ buildGoModule rec {
export SKIP_GINKGO=1
'';
checkFlags = [
# https://github.com/ossf/scorecard/pull/4134
"-skip TestRunScorecard/empty_commits_repos_should_return_repo_details_but_no_checks"
];
postInstall = ''
installShellCompletion --cmd scorecard \
--bash <($out/bin/scorecard completion bash) \
@ -69,7 +74,7 @@ buildGoModule rec {
installCheckPhase = ''
runHook preInstallCheck
$out/bin/scorecard --help
# $out/bin/scorecard version 2>&1 | grep "v${version}"
$out/bin/scorecard version 2>&1 | grep "v${version}"
runHook postInstallCheck
'';