diff options
Diffstat (limited to 'nixpkgs/pkgs/development/tools/analysis/cvehound/default.nix')
-rw-r--r-- | nixpkgs/pkgs/development/tools/analysis/cvehound/default.nix | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/nixpkgs/pkgs/development/tools/analysis/cvehound/default.nix b/nixpkgs/pkgs/development/tools/analysis/cvehound/default.nix new file mode 100644 index 000000000000..d6b08fb06153 --- /dev/null +++ b/nixpkgs/pkgs/development/tools/analysis/cvehound/default.nix @@ -0,0 +1,46 @@ +{ lib +, fetchFromGitHub +, coccinelle +, gnugrep +, python3 +}: + +python3.pkgs.buildPythonApplication rec { + pname = "cvehound"; + version = "1.1.0"; + + src = fetchFromGitHub { + owner = "evdenis"; + repo = "cvehound"; + rev = "refs/tags/${version}"; + hash = "sha256-4+0Virpsq4mwOIpostS87VYTX8hsumXEL1w8FiOrNtA="; + }; + + makeWrapperArgs = [ + "--prefix PATH : ${lib.makeBinPath [ coccinelle gnugrep ]}" + ]; + + propagatedBuildInputs = with python3.pkgs; [ + lxml + setuptools + sympy + ]; + + nativeCheckInputs = with python3.pkgs; [ + gitpython + psutil + pytestCheckHook + ]; + + # Tries to clone the kernel sources + doCheck = false; + + meta = with lib; { + description = "Tool to check linux kernel source dump for known CVEs"; + homepage = "https://github.com/evdenis/cvehound"; + changelog = "https://github.com/evdenis/cvehound/blob/${src.rev}/ChangeLog"; + # See https://github.com/evdenis/cvehound/issues/22 + license = with licenses; [ gpl2Only gpl3Plus ]; + maintainers = with maintainers; [ ambroisie ]; + }; +} |