7 py = python3.override {
8 packageOverrides = self: super: {
9 packaging = super.packaging.overridePythonAttrs (oldAttrs: rec {
11 src = oldAttrs.src.override {
13 hash = "sha256-3UfEKSfYmrkR5gZRiQfMLTofOLvQJjhZcGQ/nFuOz+s=";
15 nativeBuildInputs = with python3.pkgs; [ setuptools ];
16 propagatedBuildInputs = with python3.pkgs; [ pyparsing six ];
23 buildPythonApplication rec {
28 src = fetchFromGitHub {
31 rev = "refs/tags/v${version}";
32 hash = "sha256-rsdstzNZvokYfTjEyPrWR+0SJpf9wL0HAesq8+A+tPY=";
35 nativeBuildInputs = with py.pkgs; [
39 propagatedBuildInputs = with py.pkgs; [
46 nativeCheckInputs = with py.pkgs; [
53 # Too sensitive to pass
58 # Requires network access
60 "test_ensure_accessing_advisories_triggers_update"
61 "test_ensure_accessing_advisories_triggers_update"
62 "test_ensure_gemnasium_update"
63 "test_ensure_missing_github_token_raises_usage_error"
64 "test_ensure_pypi_advisory_db_update"
65 "test_ensure_source_is_affected_single"
66 "test_osv_advisory_with_vulnerable_package_via_osv_api"
70 pythonImportsCheck = [
75 description = "Tool to Python dependencies against security advisory databases";
76 homepage = "https://github.com/twu/skjold";
77 changelog = "https://github.com/twu/skjold/releases/tag/v${version}";
78 license = with licenses; [ mit ];
79 maintainers = with maintainers; [ fab ];