pkgs/tools/security/trufflehog/default.nix

   1 {
   2   lib,
   3   fetchFromGitHub,
   4   buildGoModule,
   5   testers,
   6   trufflehog,
   7 }:
   8
   9 buildGoModule rec {
  10   pname = "trufflehog";
  11   version = "3.84.0";
  12
  13   src = fetchFromGitHub {
  14     owner = "trufflesecurity";
  15     repo = "trufflehog";
  16     rev = "refs/tags/v${version}";
  17     hash = "sha256-r/7mpq5yQCcPoNr4d/3ShR6V+cyX8p2vFcGkiza1WLk=";
  18   };
  19
  20   vendorHash = "sha256-SNhWDGvLAT2vP43x0chvzyjvpku7YGDvA7P+V175gIg=";
  21
  22   proxyVendor = true;
  23
  24   ldflags = [
  25     "-s"
  26     "-w"
  27     "-X=github.com/trufflesecurity/trufflehog/v3/pkg/version.BuildVersion=${version}"
  28   ];
  29
  30   # Test cases run git clone and require network access
  31   doCheck = false;
  32
  33   postInstall = ''
  34     rm $out/bin/{generate,snifftest}
  35   '';
  36
  37   passthru = {
  38     tests.version = testers.testVersion { package = trufflehog; };
  39   };
  40
  41   meta = with lib; {
  42     description = "Find credentials all over the place";
  43     homepage = "https://github.com/trufflesecurity/trufflehog";
  44     changelog = "https://github.com/trufflesecurity/trufflehog/releases/tag/v${version}";
  45     license = with licenses; [ agpl3Only ];
  46     maintainers = with maintainers; [ fab ];
  47   };
  48 }