Files

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

56 lines
973 B
Nix
Raw Permalink Normal View History

2025-10-09 14:15:47 +02:00
{
lib,
buildGoModule,
fetchFromGitHub,
makeWrapper,
rpm,
xz,
}:
buildGoModule rec {
pname = "clair";
version = "4.8.0";
src = fetchFromGitHub {
owner = "quay";
repo = "clair";
rev = "v${version}";
hash = "sha256-itIjDdTKQ0PCfOkefXxqu6MpdWK3F1j6ArvaInQd/hc=";
};
vendorHash = "sha256-CpIOQiEjQGC6qeoxRS/jFohUnELefAX0KOERudL6BGM=";
nativeBuildInputs = [
makeWrapper
];
subPackages = [
"cmd/clair"
"cmd/clairctl"
];
ldflags = [
"-s"
"-w"
"-X main.Version=${version}"
];
postInstall = ''
wrapProgram $out/bin/clair \
--prefix PATH : "${
lib.makeBinPath [
rpm
xz
]
}"
'';
meta = {
description = "Vulnerability Static Analysis for Containers";
homepage = "https://github.com/quay/clair";
changelog = "https://github.com/quay/clair/blob/v${version}/CHANGELOG.md";
license = lib.licenses.asl20;
maintainers = [ ];
};
}