Merge pull request #156575 from fabaff/bump-checkov

checkov: 2.0.752 -> 2.0.753

authored by Fabian Affolter and committed by GitHub 1860f951 7f2639dd

+14 -5
+14 -5
pkgs/development/tools/analysis/checkov/default.nix
··· 22 22 23 23 buildPythonApplication rec { 24 24 pname = "checkov"; 25 - version = "2.0.727"; 25 + version = "2.0.753"; 26 26 27 27 src = fetchFromGitHub { 28 28 owner = "bridgecrewio"; 29 29 repo = pname; 30 30 rev = version; 31 - hash = "sha256-hegbkmM8ZN6zO2iANGRr2QRW3ErdtwYaTo618uELev0="; 31 + hash = "sha256-6CBe4BuztW3EoLWqGmuRmWfVfb1gP5cPEzYnyBtPEsE="; 32 32 }; 33 33 34 34 nativeBuildInputs = with py.pkgs; [ ··· 60 60 networkx 61 61 packaging 62 62 policyuniverse 63 + prettytable 63 64 pyyaml 64 65 semantic-version 65 66 tabulate ··· 71 72 72 73 checkInputs = with py.pkgs; [ 73 74 aioresponses 74 - jsonschema 75 75 mock 76 76 pytest-asyncio 77 77 pytest-mock ··· 81 81 82 82 postPatch = '' 83 83 substituteInPlace setup.py \ 84 - --replace "cyclonedx-python-lib>=0.11.0,<1.0.0" "cyclonedx-python-lib>=0.11.0" \ 85 - --replace "jsonschema==3.0.2" "jsonschema>=3.0.2" 84 + --replace "cyclonedx-python-lib>=0.11.0,<1.0.0" "cyclonedx-python-lib>=0.11.0" 85 + ''; 86 + 87 + preCheck = '' 88 + export HOME=$(mktemp -d); 86 89 ''; 87 90 88 91 disabledTests = [ ··· 92 95 "TestSarifReport" 93 96 # Will probably be fixed in one of the next releases 94 97 "test_valid_cyclonedx_bom" 98 + # Requires prettytable release which is only available in staging 99 + "test_skipped_check_exists" 100 + "test_record_relative_path_with_relative_dir" 95 101 ]; 96 102 97 103 disabledTestPaths = [ ··· 101 107 "tests/terraform/" 102 108 # Performance tests have no value for us 103 109 "performance_tests/test_checkov_performance.py" 110 + # Requires prettytable release which is only available in staging 111 + "tests/sca_package/" 112 + "tests/test_runner_filter.py" 104 113 ]; 105 114 106 115 pythonImportsCheck = [