1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
{ lib
, buildPythonApplication
, fetchFromGitHub
# aiohttp[speedups]
, aiodns
, aiohttp
, beautifulsoup4
, brotlipy
, cvss
, distro
, filetype
, google-cloud-sdk
, jinja2
, jsonschema
, lib4sbom
, packageurl-python
, packaging
, plotly
, pytestCheckHook
, python-gnupg
, pyyaml
, rich
, rpmfile
, setuptools
, toml
, xmlschema
, zstandard
, reportlab
, pip
, testers
, cve-bin-tool
}:
buildPythonApplication rec {
pname = "cve-bin-tool";
version = "3.3";
format = "setuptools";
src = fetchFromGitHub {
owner = "intel";
repo = "cve-bin-tool";
rev = "refs/tags/v${version}";
hash = "sha256-A5w4U5EDX+UZWNMuz8GTOcubo8N2KfDlVV0aRNsO8/E=";
};
# Wants to open a sqlite database, access the internet, etc
doCheck = false;
dependencies = [
# aiohttp[speedups]
aiodns
aiohttp
beautifulsoup4
brotlipy
cvss
distro
filetype
google-cloud-sdk # gsutil
jinja2
jsonschema
lib4sbom
packageurl-python
packaging
plotly
python-gnupg
pyyaml
rich
rpmfile
setuptools
toml
xmlschema
zstandard
];
optional-dependencies = {
pdf = [
reportlab
];
};
propagatedBuildInputs = [
pip
];
nativeCheckInputs = [
pytestCheckHook
] ++ lib.flatten (lib.attrValues optional-dependencies);
pythonImportsCheck = [
"cve_bin_tool"
];
passthru.tests.version = testers.testVersion { package = cve-bin-tool; };
meta = with lib; {
description = "CVE Binary Checker Tool";
homepage = "https://github.com/intel/cve-bin-tool";
license = licenses.gpl3Plus;
maintainers = [ ];
};
}
|
