114 lines
2.3 KiB
Nix
114 lines
2.3 KiB
Nix
|
{
|
||
|
|
lib,
|
||
|
|
buildPythonPackage,
|
||
|
|
pythonOlder,
|
||
|
|
fetchFromGitHub,
|
||
|
|
setuptools,
|
||
|
|
click,
|
||
|
|
urllib3,
|
||
|
|
requests,
|
||
|
|
packaging,
|
||
|
|
dparse,
|
||
|
|
ruamel-yaml,
|
||
|
|
jinja2,
|
||
|
|
marshmallow,
|
||
|
|
authlib,
|
||
|
|
rich,
|
||
|
|
typer,
|
||
|
|
pydantic,
|
||
|
|
safety-schemas,
|
||
|
|
typing-extensions,
|
||
|
|
filelock,
|
||
|
|
psutil,
|
||
|
|
git,
|
||
|
|
pytestCheckHook,
|
||
|
|
}:
|
||
|
|
|
||
|
|
buildPythonPackage rec {
|
||
|
|
pname = "safety";
|
||
|
|
version = "3.2.9";
|
||
|
|
|
||
|
|
disabled = pythonOlder "3.7";
|
||
|
|
|
||
|
|
pyproject = true;
|
||
|
|
|
||
|
|
src = fetchFromGitHub {
|
||
|
|
owner = "pyupio";
|
||
|
|
repo = "safety";
|
||
|
|
rev = "refs/tags/${version}";
|
||
|
|
hash = "sha256-etA/S/i87w4ihsqQo5JJjt6hWC7Jt9/q8vhqyo+DTek=";
|
||
|
|
};
|
||
|
|
|
||
|
|
postPatch = ''
|
||
|
|
substituteInPlace safety/safety.py \
|
||
|
|
--replace-fail "telemetry: bool = True" "telemetry: bool = False"
|
||
|
|
substituteInPlace safety/util.py \
|
||
|
|
--replace-fail "telemetry: bool = True" "telemetry: bool = False"
|
||
|
|
substituteInPlace safety/cli.py \
|
||
|
|
--replace-fail "disable-optional-telemetry', default=False" \
|
||
|
|
"disable-optional-telemetry', default=True"
|
||
|
|
substituteInPlace safety/scan/finder/handlers.py \
|
||
|
|
--replace-fail "telemetry=True" "telemetry=False"
|
||
|
|
'';
|
||
|
|
|
||
|
|
build-system = [ setuptools ];
|
||
|
|
|
||
|
|
pythonRelaxDeps = [
|
||
|
|
"dparse"
|
||
|
|
"filelock"
|
||
|
|
];
|
||
|
|
|
||
|
|
dependencies = [
|
||
|
|
setuptools
|
||
|
|
click
|
||
|
|
urllib3
|
||
|
|
requests
|
||
|
|
packaging
|
||
|
|
dparse
|
||
|
|
ruamel-yaml
|
||
|
|
jinja2
|
||
|
|
marshmallow
|
||
|
|
authlib
|
||
|
|
rich
|
||
|
|
typer
|
||
|
|
pydantic
|
||
|
|
safety-schemas
|
||
|
|
typing-extensions
|
||
|
|
filelock
|
||
|
|
psutil
|
||
|
|
];
|
||
|
|
|
||
|
|
nativeCheckInputs = [
|
||
|
|
git
|
||
|
|
pytestCheckHook
|
||
|
|
];
|
||
|
|
|
||
|
|
# Disable tests depending on online services
|
||
|
|
disabledTests = [
|
||
|
|
"test_announcements_if_is_not_tty"
|
||
|
|
"test_check_live"
|
||
|
|
"test_debug_flag"
|
||
|
|
"test_get_packages_licenses_without_api_key"
|
||
|
|
"test_validate_with_basic_policy_file"
|
||
|
|
];
|
||
|
|
|
||
|
|
# ImportError: cannot import name 'get_command_for' from partially initialized module 'safety.cli_util' (most likely due to a circular import)
|
||
|
|
disabledTestPaths = [ "tests/alerts/test_utils.py" ];
|
||
|
|
|
||
|
|
preCheck = ''
|
||
|
|
export HOME=$(mktemp -d)
|
||
|
|
'';
|
||
|
|
|
||
|
|
meta = with lib; {
|
||
|
|
description = "Checks installed dependencies for known vulnerabilities";
|
||
|
|
mainProgram = "safety";
|
||
|
|
homepage = "https://github.com/pyupio/safety";
|
||
|
|
changelog = "https://github.com/pyupio/safety/blob/${version}/CHANGELOG.md";
|
||
|
|
license = licenses.mit;
|
||
|
|
maintainers = with maintainers; [
|
||
|
|
thomasdesr
|
||
|
|
dotlambda
|
||
|
|
];
|
||
|
|
};
|
||
|
|
}
|