Commit 79396a2a authored by Stephan Heßelmann's avatar Stephan Heßelmann
Browse files

cosign: allow darwin networking for tests

parent 58f7e4af

pkgs/tools/security/cosign/default.nix

+24 −4
Original line number Diff line number Diff line 
{ stdenv, lib, buildGoModule, fetchFromGitHub, pcsclite, pkg-config, installShellFiles, PCSC, pivKeySupport ? true, pkcs11Support ? true }:



{ stdenv

, lib

, buildGoModule

, fetchFromGitHub

, pcsclite

, pkg-config

, installShellFiles

, PCSC

, pivKeySupport ? true

, pkcs11Support ? true

, testers

, cosign

}:

buildGoModule rec {

  pname = "cosign";

  version = "2.0.0";
@@ -11,7 +22,8 @@ buildGoModule rec { 
    sha256 = "sha256-919oxYi4e56EhSBN0FdcEZBA430owaDnKHkgTneScXw=";

  };



  buildInputs = lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite)

  buildInputs =

    lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite)

    ++ lib.optionals (stdenv.isDarwin && pivKeySupport) [ PCSC ];



  nativeBuildInputs = [ pkg-config installShellFiles ];
@@ -31,6 +43,8 @@ buildGoModule rec { 
    "-X sigs.k8s.io/release-utils/version.gitTreeState=clean"

  ];



  __darwinAllowLocalNetworking = true;



  preCheck = ''

    # test all paths

    unset subPackages
@@ -47,6 +61,12 @@ buildGoModule rec { 
      --zsh <($out/bin/cosign completion zsh)

  '';



  passthru.tests.version = testers.testVersion {

    package = cosign;

    command = "cosign version";

    version = "v${version}";

  };



  meta = with lib; {

    homepage = "https://github.com/sigstore/cosign";

    changelog = "https://github.com/sigstore/cosign/releases/tag/v${version}";