48 lines
1.1 KiB
Nix
48 lines
1.1 KiB
Nix
{ lib
|
|
, buildGoModule
|
|
, fetchFromGitHub
|
|
, testers
|
|
, osv-scanner
|
|
}:
|
|
buildGoModule rec {
|
|
pname = "osv-scanner";
|
|
version = "1.7.1";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "google";
|
|
repo = pname;
|
|
rev = "v${version}";
|
|
hash = "sha256-JlTD8el4hXVYI76+cxGNemkUu0n2QxCqisr6R9aPqdI=";
|
|
};
|
|
|
|
vendorHash = "sha256-J5qLs4EirBOfjnLv8eQBSd9w9nzpxBW5GS28CgQMsN8=";
|
|
|
|
subPackages = [
|
|
"cmd/osv-scanner"
|
|
];
|
|
|
|
ldflags = [
|
|
"-s"
|
|
"-w"
|
|
"-X github.com/google/osv-scanner/internal/version.OSVVersion=${version}"
|
|
"-X main.commit=n/a"
|
|
"-X main.date=1970-01-01T00:00:00Z"
|
|
];
|
|
|
|
# Tests require network connectivity to query https://api.osv.dev.
|
|
doCheck = false;
|
|
|
|
passthru.tests.version = testers.testVersion {
|
|
package = osv-scanner;
|
|
};
|
|
|
|
meta = with lib; {
|
|
description = "Vulnerability scanner written in Go which uses the data provided by https://osv.dev";
|
|
mainProgram = "osv-scanner";
|
|
homepage = "https://github.com/google/osv-scanner";
|
|
changelog = "https://github.com/google/osv-scanner/releases/tag/v${version}";
|
|
license = licenses.asl20;
|
|
maintainers = with maintainers; [ stehessel urandom ];
|
|
};
|
|
}
|