rekor-cli, rekor-server: 1.1.1 -> 1.2.1

Fixes CVE-2023-33199.

Changelog:
https://github.com/sigstore/rekor/releases/tag/v1.2.1
This commit is contained in:
Thomas Gerbet 2023-05-26 17:45:25 +02:00
parent 757a0d107c
commit e655d0318c

View file

@ -4,13 +4,13 @@ let
generic = { pname, packageToBuild, description }: generic = { pname, packageToBuild, description }:
buildGoModule rec { buildGoModule rec {
inherit pname; inherit pname;
version = "1.1.1"; version = "1.2.1";
src = fetchFromGitHub { src = fetchFromGitHub {
owner = "sigstore"; owner = "sigstore";
repo = "rekor"; repo = "rekor";
rev = "v${version}"; rev = "v${version}";
hash = "sha256-/zNDruJsnLlqHud67S8/QpNEPLfFcboA+2SWLB1jzbM="; hash = "sha256-tPiojtSCpqJjLGRZ1rNno7TKhmZ3jBtdb4dWLfRmh14=";
# populate values that require us to use git. By doing this in postFetch we # populate values that require us to use git. By doing this in postFetch we
# can delete .git afterwards and maintain better reproducibility of the src. # can delete .git afterwards and maintain better reproducibility of the src.
leaveDotGit = true; leaveDotGit = true;
@ -23,7 +23,7 @@ let
''; '';
}; };
vendorHash = "sha256-iQBVMYt5hXSp7y0gzKCMae3gHCvS6CN+/mDWmt1yPh8="; vendorHash = "sha256-AIXoq/sYQRCR1pllwBhflAnanUD0aGo54drBOsaxiDQ=";
nativeBuildInputs = [ installShellFiles ]; nativeBuildInputs = [ installShellFiles ];