Merge pull request #156575 from fabaff/bump-checkov

checkov: 2.0.752 -> 2.0.753

authored by Fabian Affolter and committed by GitHub 1860f951 7f2639dd

+14 -5
+14 -5
pkgs/development/tools/analysis/checkov/default.nix
··· 22 23 buildPythonApplication rec { 24 pname = "checkov"; 25 - version = "2.0.727"; 26 27 src = fetchFromGitHub { 28 owner = "bridgecrewio"; 29 repo = pname; 30 rev = version; 31 - hash = "sha256-hegbkmM8ZN6zO2iANGRr2QRW3ErdtwYaTo618uELev0="; 32 }; 33 34 nativeBuildInputs = with py.pkgs; [ ··· 60 networkx 61 packaging 62 policyuniverse 63 pyyaml 64 semantic-version 65 tabulate ··· 71 72 checkInputs = with py.pkgs; [ 73 aioresponses 74 - jsonschema 75 mock 76 pytest-asyncio 77 pytest-mock ··· 81 82 postPatch = '' 83 substituteInPlace setup.py \ 84 - --replace "cyclonedx-python-lib>=0.11.0,<1.0.0" "cyclonedx-python-lib>=0.11.0" \ 85 - --replace "jsonschema==3.0.2" "jsonschema>=3.0.2" 86 ''; 87 88 disabledTests = [ ··· 92 "TestSarifReport" 93 # Will probably be fixed in one of the next releases 94 "test_valid_cyclonedx_bom" 95 ]; 96 97 disabledTestPaths = [ ··· 101 "tests/terraform/" 102 # Performance tests have no value for us 103 "performance_tests/test_checkov_performance.py" 104 ]; 105 106 pythonImportsCheck = [
··· 22 23 buildPythonApplication rec { 24 pname = "checkov"; 25 + version = "2.0.753"; 26 27 src = fetchFromGitHub { 28 owner = "bridgecrewio"; 29 repo = pname; 30 rev = version; 31 + hash = "sha256-6CBe4BuztW3EoLWqGmuRmWfVfb1gP5cPEzYnyBtPEsE="; 32 }; 33 34 nativeBuildInputs = with py.pkgs; [ ··· 60 networkx 61 packaging 62 policyuniverse 63 + prettytable 64 pyyaml 65 semantic-version 66 tabulate ··· 72 73 checkInputs = with py.pkgs; [ 74 aioresponses 75 mock 76 pytest-asyncio 77 pytest-mock ··· 81 82 postPatch = '' 83 substituteInPlace setup.py \ 84 + --replace "cyclonedx-python-lib>=0.11.0,<1.0.0" "cyclonedx-python-lib>=0.11.0" 85 + ''; 86 + 87 + preCheck = '' 88 + export HOME=$(mktemp -d); 89 ''; 90 91 disabledTests = [ ··· 95 "TestSarifReport" 96 # Will probably be fixed in one of the next releases 97 "test_valid_cyclonedx_bom" 98 + # Requires prettytable release which is only available in staging 99 + "test_skipped_check_exists" 100 + "test_record_relative_path_with_relative_dir" 101 ]; 102 103 disabledTestPaths = [ ··· 107 "tests/terraform/" 108 # Performance tests have no value for us 109 "performance_tests/test_checkov_performance.py" 110 + # Requires prettytable release which is only available in staging 111 + "tests/sca_package/" 112 + "tests/test_runner_filter.py" 113 ]; 114 115 pythonImportsCheck = [