Unverified Commit 127c0680 authored by Fabian Affolter's avatar Fabian Affolter Committed by GitHub
Browse files

Merge pull request #298660 from fabaff/kubescape-bump 

kubescape: 2.9.1 -> 3.0.7
parents 8b73e6e8 72ea5561

pkgs/tools/security/kubescape/default.nix

+27 −21
Original line number Diff line number Diff line 
{ lib

, stdenv

, buildGoModule

, fetchFromGitHub

, git

, installShellFiles

, kubescape

, testers
@@ -8,52 +10,55 @@ 


buildGoModule rec {

  pname = "kubescape";

  version = "2.9.1";

  version = "3.0.8";



  src = fetchFromGitHub {

    owner = "kubescape";

    repo = pname;

    repo = "kubescape";

    rev = "refs/tags/v${version}";

    hash = "sha256-FKWR3pxFtJBEa14Mn3RKsLvrliHaj6TuF4F2JLtw2qA=";

    hash = "sha256-ZGDE9go8BmaXE1YFT/z5Nob90MhsKZ6oKrodDMu2npY=";

    fetchSubmodules = true;

  };



  vendorHash = "sha256-zcv8oYm6srwkwT3pUECtTewyqVVpCIcs3i0VRTRft68=";

  vendorHash = "sha256-qFJVoWzU9rqpYbb8gzdK33rq///zizxVkWhsNV8OXOM=";



  subPackages = [

    "."

  ];



  nativeBuildInputs = [

    installShellFiles

  ];



  nativeCheckInputs = [

    git

  ];



  ldflags = [

    "-s"

    "-w"

    "-X=github.com/kubescape/kubescape/v2/core/cautils.BuildNumber=v${version}"

    "-X=github.com/kubescape/kubescape/v3/core/cautils.BuildNumber=v${version}"

  ];



  subPackages = [ "." ];



  preCheck = ''

    # Feed in all but the integration tests for testing

    # This is because subPackages above limits what is built to just what we

    # want but also limits the tests

    # Skip httphandler tests - the checkPhase doesn't care about excludedPackages

    getGoDirs() {

      go list ./... | grep -v httphandler

    }

    export HOME=$(mktemp -d)



    # remove tests that use networking

    # Remove tests that use networking

    rm core/pkg/resourcehandler/urlloader_test.go

    rm core/pkg/opaprocessor/*_test.go

    rm core/cautils/getter/downloadreleasedpolicy_test.go

    rm core/core/initutils_test.go

    rm core/core/list_test.go

    rm core/pkg/resourcehandler/remotegitutils_test.go



    # remove tests that use networking

    # Remove tests that use networking

    substituteInPlace core/pkg/resourcehandler/repositoryscanner_test.go \

      --replace "TestScanRepository" "SkipScanRepository" \

      --replace "TestGit" "SkipGit"

      --replace-fail "TestScanRepository" "SkipScanRepository" \

      --replace-fail "TestGit" "SkipGit"



    # remove test that requires networking

    # Remove test that requires networking

    substituteInPlace core/cautils/scaninfo_test.go \

      --replace "TestSetContextMetadata" "SkipSetContextMetadata"

      --replace-fail "TestSetContextMetadata" "SkipSetContextMetadata"

  '';



  postInstall = ''
@@ -71,7 +76,6 @@ buildGoModule rec { 


  meta = with lib; {

    description = "Tool for testing if Kubernetes is deployed securely";

    mainProgram = "kubescape";

    homepage = "https://github.com/kubescape/kubescape";

    changelog = "https://github.com/kubescape/kubescape/releases/tag/v${version}";

    longDescription = ''
@@ -87,5 +91,7 @@ buildGoModule rec { 
    '';

    license = licenses.asl20;

    maintainers = with maintainers; [ fab jk ];

    mainProgram = "kubescape";

    broken = stdenv.isDarwin;

  };

}