Merge pull request #219221 from fabaff/ioc-scan

{ lib

, fetchFromGitHub

, python3

}:

python3.pkgs.buildPythonApplication rec {

  pname = "ioc-scan";

  version = "1.5.0";

  format = "setuptools";

  src = fetchFromGitHub {

    owner = "cisagov";

    repo = "ioc-scanner";

    rev = "refs/tags/v${version}";

    hash = "sha256-dRrLd41HVVHJse7nkem8Cy+ltfJRnJiWrX/WShMfcOw=";

  };

  postPatch = ''

    substituteInPlace pytest.ini \

      --replace " --cov" ""

  '';

  propagatedBuildInputs = with python3.pkgs; [

    docopt

  ];

  nativeCheckInputs = with python3.pkgs; [

    pyfakefs

    pytestCheckHook

  ];

  pythonImportsCheck = [

    "ioc_scan"

  ];

  meta = with lib; {

    description = "Tool to search a filesystem for indicators of compromise (IoC)";

    homepage = "https://github.com/cisagov/ioc-scanner";

    changelog = "https://github.com/cisagov/ioc-scanner/releases/tag/v${version}";

    license = with licenses; [ cc0 ];

    maintainers = with maintainers; [ fab ];

  };

}

  iodine = callPackage ../tools/networking/iodine { };

  ioc-scan = callPackage ../tools/security/ioc-scan { };

  ioccheck = callPackage ../tools/security/ioccheck { };

  ioping = callPackage ../tools/system/ioping { };