pkgs/development/tools/analysis/tfsec/default.nix

   1 { lib
   2 , buildGoModule
   3 , fetchFromGitHub
   4 }:
   5
   6 buildGoModule rec {
   7   pname = "tfsec";
   8   version = "1.28.5";
   9
  10   src = fetchFromGitHub {
  11     owner = "aquasecurity";
  12     repo = "tfsec";
  13     rev = "refs/tags/v${version}";
  14     hash = "sha256-zMOAXuMOuWzV5uqzNvw+2DiEA9o/80v7DW5KDhoT/fg=";
  15   };
  16
  17   ldflags = [
  18     "-s"
  19     "-w"
  20     "-X=github.com/aquasecurity/tfsec/version.Version=v${version}"
  21     ## not sure if this is needed (https://github.com/aquasecurity/tfsec/blob/master/.goreleaser.yml#L6)
  22     # "-extldflags '-fno-PIC -static'"
  23   ];
  24
  25   vendorHash = "sha256-nBjlsDFjkqwFBwNnGk8WC+XM5xBuopyrloPlQyOReuY=";
  26
  27   subPackages = [
  28     "cmd/tfsec"
  29     "cmd/tfsec-docs"
  30     "cmd/tfsec-checkgen"
  31   ];
  32
  33   meta = with lib; {
  34     description = "Static analysis powered security scanner for terraform code";
  35     homepage = "https://github.com/aquasecurity/tfsec";
  36     changelog = "https://github.com/aquasecurity/tfsec/releases/tag/v${version}";
  37     license = licenses.mit;
  38     maintainers = with maintainers; [ fab marsam peterromfeldhk ];
  39   };
  40 }