nixpkgs/pkgs/tools/security/vulnix/default.nix

{ lib, stdenv
, python3Packages
, nix
, ronn
}:

python3Packages.buildPythonApplication rec {
  pname = "vulnix";
  version = "1.9.6";

  src = python3Packages.fetchPypi {
    inherit pname version;
    sha256 = "0anyxmqgn4kx102l3qjhh1f2b0cg7mnlapfhriyjw0zyy5gyqvng";
  };

  outputs = [ "out" "doc" "man" ];
  nativeBuildInputs = [ ronn ];

  checkInputs = with python3Packages; [
    freezegun
    pytest
    pytestcov
    pytest-flake8
  ];

  propagatedBuildInputs = [
    nix
  ] ++ (with python3Packages; [
    click
    colorama
    pyyaml
    requests
    setuptools
    toml
    zodb
  ]);

  postBuild = "make -C doc";

  checkPhase = "py.test src/vulnix";

  postInstall = ''
    install -D -t $doc/share/doc/vulnix README.rst CHANGES.rst
    gzip $doc/share/doc/vulnix/*.rst
    install -D -t $man/share/man/man1 doc/vulnix.1
    install -D -t $man/share/man/man5 doc/vulnix-whitelist.5
  '';

  dontStrip = true;

  meta = with lib; {
    description = "NixOS vulnerability scanner";
    homepage = "https://github.com/flyingcircusio/vulnix";
    license = licenses.bsd3;
    maintainers = with maintainers; [ ckauhaus ];
  };
}
treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 2021-01-11 07:54:33 +00:00			`{ lib, stdenv`
vulnix: 1.9.4 -> 1.9.6 2020-07-02 10:48:46 +01:00			`, python3Packages`
			`, nix`
			`, ronn`
			`}:`
initial release: vulnix 2017-03-13 21:43:25 +00:00
vulnix: use python3Packages as argument 2019-11-13 15:11:56 +00:00			`python3Packages.buildPythonApplication rec {`
initial release: vulnix 2017-03-13 21:43:25 +00:00			`pname = "vulnix";`
vulnix: 1.9.4 -> 1.9.6 2020-07-02 10:48:46 +01:00			`version = "1.9.6";`
initial release: vulnix 2017-03-13 21:43:25 +00:00
vulnix: use python3Packages as argument 2019-11-13 15:11:56 +00:00			`src = python3Packages.fetchPypi {`
pythonPackages.BTrees: 4.1.4 -> 4.3.1 2017-03-15 09:29:27 +00:00			`inherit pname version;`
vulnix: 1.9.4 -> 1.9.6 2020-07-02 10:48:46 +01:00			`sha256 = "0anyxmqgn4kx102l3qjhh1f2b0cg7mnlapfhriyjw0zyy5gyqvng";`
initial release: vulnix 2017-03-13 21:43:25 +00:00			`};`

vulnix: 1.7.1 -> 1.8.0 2019-03-09 17:37:42 +00:00			`outputs = [ "out" "doc" "man" ];`
vulnix: ronn is a native build input 2019-02-14 19:38:01 +00:00			`nativeBuildInputs = [ ronn ];`
vulnix: drop obsolete patch 2018-05-02 14:09:39 +01:00
vulnix: use python3Packages as argument 2019-11-13 15:11:56 +00:00			`checkInputs = with python3Packages; [`
vulnix: 1.6.3 -> 1.7 The updated version brings selective whitelisting, i.e. when some CVEs of a package are whitelisted and others are not, only the new CVEs are reported. Also correct license to match upstream BSD-3-Clause and clean up source. 2018-07-20 14:24:40 +01:00			`freezegun`
			`pytest`
			`pytestcov`
			`pytest-flake8`
			`];`
pythonPackages.BTrees: 4.1.4 -> 4.3.1 2017-03-15 09:29:27 +00:00
initial release: vulnix 2017-03-13 21:43:25 +00:00			`propagatedBuildInputs = [`
pythonPackages.BTrees: 4.1.4 -> 4.3.1 2017-03-15 09:29:27 +00:00			`nix`
vulnix: use python3Packages as argument 2019-11-13 15:11:56 +00:00			`] ++ (with python3Packages; [`
initial release: vulnix 2017-03-13 21:43:25 +00:00			`click`
			`colorama`
pythonPackages.BTrees: 4.1.4 -> 4.3.1 2017-03-15 09:29:27 +00:00			`pyyaml`
Python: replace requests2 with requests tree-wide See f63eb5857352705665411130d4f1638d55dd8c58 The `requests2` attribute now throws an error informing that `requests` should be used instead. 2017-05-07 11:55:45 +01:00			`requests`
vulnix: add missing setuptools dependency More #68314 related breakage. 2019-10-02 11:46:01 +01:00			`setuptools`
vulnix: 1.4.0 -> 1.6.1 Update to current vulnix which features greatly improved whitelist handling among others. - Temporarly disable flake8 until #39206 is solved. - Split docs into own output. 2018-04-20 09:00:56 +01:00			`toml`
vulnix: use zodb from pythonPackages 2017-08-09 06:19:39 +01:00			`zodb`
pythonPackages.BTrees: 4.1.4 -> 4.3.1 2017-03-15 09:29:27 +00:00			`]);`
initial release: vulnix 2017-03-13 21:43:25 +00:00
vulnix: 1.6.3 -> 1.7 The updated version brings selective whitelisting, i.e. when some CVEs of a package are whitelisted and others are not, only the new CVEs are reported. Also correct license to match upstream BSD-3-Clause and clean up source. 2018-07-20 14:24:40 +01:00			`postBuild = "make -C doc";`
vulnix: 1.4.0 -> 1.6.1 Update to current vulnix which features greatly improved whitelist handling among others. - Temporarly disable flake8 until #39206 is solved. - Split docs into own output. 2018-04-20 09:00:56 +01:00
			`checkPhase = "py.test src/vulnix";`

			`postInstall = ''`
			`install -D -t $doc/share/doc/vulnix README.rst CHANGES.rst`
			`gzip $doc/share/doc/vulnix/*.rst`
vulnix: 1.7.1 -> 1.8.0 2019-03-09 17:37:42 +00:00			`install -D -t $man/share/man/man1 doc/vulnix.1`
			`install -D -t $man/share/man/man5 doc/vulnix-whitelist.5`
vulnix: 1.2.2 -> 1.3.4 The build needs the ZODB fix in PR #30925 to succeed. 2017-10-29 11:27:58 +00:00			`'';`

vulnix: 1.4.0 -> 1.6.1 Update to current vulnix which features greatly improved whitelist handling among others. - Temporarly disable flake8 until #39206 is solved. - Split docs into own output. 2018-04-20 09:00:56 +01:00			`dontStrip = true;`
initial release: vulnix 2017-03-13 21:43:25 +00:00
treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 2021-01-11 07:54:33 +00:00			`meta = with lib; {`
initial release: vulnix 2017-03-13 21:43:25 +00:00			`description = "NixOS vulnerability scanner";`
vulnix: 1.8.2 -> 1.9.1 New upstream release. The old version is broken because NIST has discontinued NVD XML feeds. vulnix 1.9.x uses the JSON feeds. 2019-11-14 16:50:41 +00:00			`homepage = "https://github.com/flyingcircusio/vulnix";`
vulnix: 1.6.3 -> 1.7 The updated version brings selective whitelisting, i.e. when some CVEs of a package are whitelisted and others are not, only the new CVEs are reported. Also correct license to match upstream BSD-3-Clause and clean up source. 2018-07-20 14:24:40 +01:00			`license = licenses.bsd3;`
vulnix: 1.8.2 -> 1.9.1 New upstream release. The old version is broken because NIST has discontinued NVD XML feeds. vulnix 1.9.x uses the JSON feeds. 2019-11-14 16:50:41 +00:00			`maintainers = with maintainers; [ ckauhaus ];`
initial release: vulnix 2017-03-13 21:43:25 +00:00			`};`
pythonPackages.BTrees: 4.1.4 -> 4.3.1 2017-03-15 09:29:27 +00:00			`}`