50 lines
952 B
Nix
50 lines
952 B
Nix
{ lib
|
|
, buildGoModule
|
|
, fetchFromGitHub
|
|
, makeWrapper
|
|
, rpm
|
|
, xz
|
|
}:
|
|
|
|
buildGoModule rec {
|
|
pname = "clair";
|
|
version = "4.5.1";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "quay";
|
|
repo = pname;
|
|
rev = "v${version}";
|
|
hash = "sha256-4S9r8ez67bmhjEMp3w2xJVgkFN12B+pcyYVLc5P2Il0=";
|
|
};
|
|
|
|
vendorSha256 = "sha256-Ly0U13C3WaGHRlu5Lj5MtdnTStTAJb4NUQpCY+7PeT0=";
|
|
|
|
nativeBuildInputs = [
|
|
makeWrapper
|
|
];
|
|
|
|
subPackages = [
|
|
"cmd/clair"
|
|
"cmd/clairctl"
|
|
];
|
|
|
|
ldflags = [
|
|
"-s"
|
|
"-w"
|
|
"-X main.Version=${version}"
|
|
];
|
|
|
|
postInstall = ''
|
|
wrapProgram $out/bin/clair \
|
|
--prefix PATH : "${lib.makeBinPath [ rpm xz ]}"
|
|
'';
|
|
|
|
meta = with lib; {
|
|
description = "Vulnerability Static Analysis for Containers";
|
|
homepage = "https://github.com/quay/clair";
|
|
changelog = "https://github.com/quay/clair/blob/v${version}/CHANGELOG.md";
|
|
license = licenses.asl20;
|
|
maintainers = with maintainers; [ marsam ];
|
|
};
|
|
}
|