nixpkgs/pkgs/tools/security/deepsecrets/default.nix
2023-07-01 23:11:08 +02:00

50 lines
1.1 KiB
Nix

{ lib
, python3
, fetchFromGitHub
}:
python3.pkgs.buildPythonApplication rec {
pname = "deepsecrets";
version = "1.0.6";
format = "pyproject";
src = fetchFromGitHub {
owner = "avito-tech";
repo = "deepsecrets";
rev = "refs/tags/v${version}";
hash = "sha256-VfIsPgStHcIYGbfrOs1mvgoq0ZoVSZwILFVBeMt/5Jc=";
};
postPatch = ''
substituteInPlace pyproject.toml \
--replace 'pyyaml = "^5.4.1"' 'pyyaml = "*"' \
--replace 'regex = "^2023.3.23"' 'regex = "*"' \
--replace 'mmh3 = "^3.0.0"' 'mmh3 = "*"'
'';
nativeBuildInputs = with python3.pkgs; [
poetry-core
];
propagatedBuildInputs = with python3.pkgs; [
dotwiz
mmh3
ordered-set
pydantic
pygments
pyyaml
regex
];
pythonImportsCheck = [
"deepsecrets"
];
meta = with lib; {
description = "Secrets scanner that understands code";
homepage = "https://github.com/avito-tech/deepsecrets";
changelog = "https://github.com/avito-tech/deepsecrets/releases/tag/v${version}";
license = licenses.mit;
maintainers = with maintainers; [ fab ];
};
}