nixpkgs/pkgs/tools/security/trufflehog/default.nix
2020-05-05 18:16:57 -07:00

39 lines
1.2 KiB
Nix

{ lib, python3Packages }:
let
truffleHogRegexes = python3Packages.buildPythonPackage rec {
pname = "truffleHogRegexes";
version = "0.0.7";
src = python3Packages.fetchPypi {
inherit pname version;
sha256 = "b81dfc60c86c1e353f436a0e201fd88edb72d5a574615a7858485c59edf32405";
};
};
in
python3Packages.buildPythonApplication rec {
pname = "truffleHog";
version = "2.1.11";
src = python3Packages.fetchPypi {
inherit pname version;
sha256 = "53619f0c5be082abd377f987291ace80bc3b88f864972b1a30494780980f769e";
};
# Relax overly restricted version constraint
postPatch = ''
substituteInPlace setup.py --replace "GitPython ==" "GitPython >= "
'';
propagatedBuildInputs = [ python3Packages.GitPython truffleHogRegexes ];
# Test cases run git clone and require network access
doCheck = false;
meta = {
homepage = "https://github.com/dxa4481/truffleHog";
description = "Searches through git repositories for high entropy strings and secrets, digging deep into commit history";
license = with lib.licenses; [ gpl2 ];
maintainers = with lib.maintainers; [ bhipple ];
};
}