dep-scan: init at 5.0.2

{ lib

, python3

, fetchFromGitHub

}:

python3.pkgs.buildPythonApplication rec {

  pname = "dep-scan";

  version = "5.0.2";

  pyproject = true;

  src = fetchFromGitHub {

    owner = "owasp-dep-scan";

    repo = "dep-scan";

    rev = "refs/tags/v${version}";

    hash = "sha256-qiJyGBGxznNF4LNG9fbmjG7wX0odhrUO2LxOWABtLQA=";

  };

  postPatch = ''

    substituteInPlace pytest.ini \

      --replace " --cov-append --cov-report term --cov depscan" ""

  '';

  nativeBuildInputs = with python3.pkgs; [

    setuptools

  ];

  propagatedBuildInputs = with python3.pkgs; [

    appthreat-vulnerability-db

    defusedxml

    jinja2

    oras

    pdfkit

    pygithub

    pyyaml

    quart

    rich

    toml

  ];

  nativeCheckInputs = with python3.pkgs; [

    httpretty

    pytestCheckHook

  ];

  pythonImportsCheck = [

    "depscan"

  ];

  preCheck = ''

    export HOME=$(mktemp -d)

  '';

  disabledTests = [

    # Test is not present

    "test_query_metadata2"

  ];

  meta = with lib; {

    description = "Security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies";

    homepage = "https://github.com/owasp-dep-scan/dep-scan";

    changelog = "https://github.com/owasp-dep-scan/dep-scan/releases/tag/v${version}";

    license = licenses.mit;

    maintainers = with maintainers; [ fab ];

    mainProgram = "dep-scan";

  };

}