pyrox.dev
1{ lib
2, buildPythonPackage
3, fetchPypi
4, isPy3k
5, pythonOlder
6, gitpython
7, pbr
8, pyyaml
9, rich
10, stevedore
11}:
12
13buildPythonPackage rec {
14 pname = "bandit";
15 version = "1.7.5";
16 format = "setuptools";
17
18 disabled = pythonOlder "3.7";
19
20 src = fetchPypi {
21 inherit pname version;
22 hash = "sha256-vfxzm6oDuIDC0V0EMbMcZY/8NI6Qf+GX5U4Did1Z4R4=";
23 };
24
25 nativeBuildInputs = [
26 pbr
27 ];
28
29 propagatedBuildInputs = [
30 gitpython
31 pyyaml
32 rich
33 stevedore
34 ];
35
36 # Framework is Tox, tox performs 'pip install' inside the virtual-env
37 # and this requires Network Connectivity
38 doCheck = false;
39
40 pythonImportsCheck = [
41 "bandit"
42 ];
43
44 meta = with lib; {
45 description = "Security oriented static analyser for python code";
46 homepage = "https://bandit.readthedocs.io/";
47 changelog = "https://github.com/PyCQA/bandit/releases/tag/${version}";
48 license = licenses.asl20;
49 maintainers = with maintainers; [ kamadorueda ];
50 };
51}