paretosecurity: 0.0.88 -> 0.0.89

    { config, pkgs, ... }:

    {

      services.paretosecurity.enable = true;

      users.users.alice = {

        isNormalUser = true;

      };

    };

  testScript = ''

    (status, out) = machine.execute("paretosecurity check")

    assert status == 1, "paretosecurity did not return 1 on failing checks"

    machine.succeed(

      "su -- alice -c 'paretosecurity check"

      # Disable some checks that need intricate test setup so that this test

      # remains simple and fast. Tests for all checks and edge cases available

      # at https://github.com/ParetoSecurity/agent/tree/main/test/integration

      + " --skip c96524f2-850b-4bb9-abc7-517051b6c14e"  # SecureBoot

      + " --skip 37dee029-605b-4aab-96b9-5438e5aa44d8"  # Screen lock

      + " --skip 21830a4e-84f1-48fe-9c5b-beab436b2cdb"  # Disk encryption

      + " --skip 44e4754a-0b42-4964-9cc2-b88b2023cb1e"  # Pareto Security is up to date

      + " --skip f962c423-fdf5-428a-a57a-827abc9b253e"  # Password manager installed

      + "'"

    )

  '';

}

buildGoModule rec {

  pname = "paretosecurity";

  version = "0.0.88";

  version = "0.0.89";

  src = fetchFromGitHub {

    owner = "ParetoSecurity";

    repo = "agent";

    rev = version;

    hash = "sha256-UVnZhkajrc9q6AZvIU7oi931ugxkiVSPk1NugAERnek=";

    hash = "sha256-qZMJFrkHRurUvltDVubyfol5IHKxfyDbNE2XFo/KXF8=";

  };

  vendorHash = "sha256-HReQu23sHLaxc5N8h2vYv64ruJPmY4HM9whAEKV+3Eo=";