33afbf39f6
checkInputs used to be added to nativeBuildInputs. Now we have nativeCheckInputs to do that instead. Doing this treewide change allows to keep hashes identical to before the introduction of nativeCheckInputs.
74 lines
1.4 KiB
Nix
74 lines
1.4 KiB
Nix
{ lib
|
|
, buildPythonPackage
|
|
, fetchFromGitHub
|
|
, gibberish-detector
|
|
, mock
|
|
, pkgs
|
|
, pyahocorasick
|
|
, pytestCheckHook
|
|
, pythonOlder
|
|
, pyyaml
|
|
, requests
|
|
, responses
|
|
, unidiff
|
|
}:
|
|
|
|
buildPythonPackage rec {
|
|
pname = "detect-secrets";
|
|
version = "1.4.0";
|
|
format = "setuptools";
|
|
|
|
disabled = pythonOlder "3.7";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "Yelp";
|
|
repo = pname;
|
|
rev = "v${version}";
|
|
hash = "sha256-6EmL6XPySqcA3EA+FFkfw7Dkxl5LvyBorIw0hesV5eU=";
|
|
leaveDotGit = true;
|
|
};
|
|
|
|
propagatedBuildInputs = [
|
|
gibberish-detector
|
|
pyyaml
|
|
pyahocorasick
|
|
requests
|
|
];
|
|
|
|
nativeCheckInputs = [
|
|
mock
|
|
pytestCheckHook
|
|
responses
|
|
unidiff
|
|
pkgs.gitMinimal
|
|
];
|
|
|
|
preCheck = ''
|
|
export HOME=$(mktemp -d);
|
|
'';
|
|
|
|
disabledTests = [
|
|
# Tests are failing for various reasons. Needs to be adjusted with the next update
|
|
"test_basic"
|
|
"test_handles_each_path_separately"
|
|
"test_handles_multiple_directories"
|
|
"test_load_and_output"
|
|
"test_make_decisions"
|
|
"test_restores_line_numbers"
|
|
"test_saves_to_baseline"
|
|
"test_scan_all_files"
|
|
"test_start_halfway"
|
|
];
|
|
|
|
pythonImportsCheck = [
|
|
"detect_secrets"
|
|
];
|
|
|
|
meta = with lib; {
|
|
description = "An enterprise friendly way of detecting and preventing secrets in code";
|
|
homepage = "https://github.com/Yelp/detect-secrets";
|
|
license = licenses.asl20;
|
|
maintainers = with maintainers; [ marsam ];
|
|
};
|
|
}
|