pkgs/tools/security/slsa-verifier/default.nix

   1 { lib
   2 , fetchFromGitHub
   3 , buildGoModule
   4 }:
   5
   6 buildGoModule rec {
   7   pname = "slsa-verifier";
   8   version = "2.6.0";
   9
  10   src = fetchFromGitHub {
  11     owner = "slsa-framework";
  12     repo = "slsa-verifier";
  13     rev = "v${version}";
  14     hash = "sha256-x9phhfQVeUO7NRjB6n1rdwkpeCu4VMUcJTrkP6PfVyA=";
  15   };
  16
  17   vendorHash = "sha256-HJ3/RY0Co86y1t2Mas5C+rjwRRG4ZJgxjkz9iWcKf5E=";
  18
  19   CGO_ENABLED = 0;
  20
  21   subPackages = [ "cli/slsa-verifier" ];
  22
  23   tags = [ "netgo" ];
  24
  25   ldflags = [
  26     "-s"
  27     "-w"
  28     "-X sigs.k8s.io/release-utils/version.gitVersion=${version}"
  29   ];
  30
  31   doCheck = false;
  32
  33   meta = {
  34     homepage = "https://github.com/slsa-framework/slsa-verifier";
  35     changelog = "https://github.com/slsa-framework/slsa-verifier/releases/tag/v${version}";
  36     description = "Verify provenance from SLSA compliant builders";
  37     mainProgram = "slsa-verifier";
  38     license = lib.licenses.asl20;
  39     maintainers = with lib.maintainers; [ developer-guy mlieberman85 ];
  40   };
  41 }