pkgs/tools/security/cve-bin-tool/default.nix

   1 { lib
   2 , buildPythonApplication
   3 , fetchFromGitHub
   4 , jsonschema
   5 , plotly
   6 , beautifulsoup4
   7 , pyyaml
   8 , isort
   9 , py
  10 , jinja2
  11 , rpmfile
  12 , reportlab
  13 , zstandard
  14 , rich
  15 , aiohttp
  16 , toml
  17 , distro
  18   # aiohttp[speedups]
  19 , aiodns
  20 , brotlipy
  21 , cchardet
  22 , pillow
  23 , pytestCheckHook
  24 , xmlschema
  25 , setuptools
  26 , packaging
  27 }:
  28 buildPythonApplication rec {
  29   pname = "cve-bin-tool";
  30   version = "3.1.1";
  31
  32   src = fetchFromGitHub {
  33     owner = "intel";
  34     repo = "cve-bin-tool";
  35     rev = "v${version}";
  36     sha256 = "0nz3ax3ldnrzk8694x0p743g5h2zply29ljpn21llbc7ca27zdv9";
  37   };
  38
  39   # Wants to open a sqlite database, access the internet, etc
  40   doCheck = false;
  41
  42   propagatedBuildInputs = [
  43     jsonschema
  44     plotly
  45     beautifulsoup4
  46     pyyaml
  47     isort
  48     py
  49     jinja2
  50     rpmfile
  51     reportlab
  52     zstandard
  53     rich
  54     aiohttp
  55     toml
  56     distro
  57     # aiohttp[speedups]
  58     aiodns
  59     brotlipy
  60     cchardet
  61     # needed by brotlipy
  62     pillow
  63     setuptools
  64     xmlschema
  65     packaging
  66   ];
  67
  68   checkInputs = [
  69     pytestCheckHook
  70   ];
  71
  72   pythonImportsCheck = [
  73     "cve_bin_tool"
  74   ];
  75
  76   # required until https://github.com/intel/cve-bin-tool/pull/1665 is merged
  77   postPatch = ''
  78     sed '/^pytest/d' -i requirements.txt
  79   '';
  80
  81   meta = with lib; {
  82     description = "CVE Binary Checker Tool";
  83     homepage = "https://github.com/intel/cve-bin-tool";
  84     license = licenses.gpl3Plus;
  85     maintainers = teams.determinatesystems.members;
  86   };
  87 }