pyrox.dev
lol
semgrep: 0.108.0 -> 0.112.1 (#190999)
authored by
Manuel Mendez
and committed by
GitHub
8303af8a
23aff1fc
+8
-8
pkgs/tools/security/semgrep/common.nix
+8
-8
pkgs/tools/security/semgrep/common.nix
···
1
{ lib, fetchFromGitHub, fetchzip, stdenv }:
2
3
rec {
4
-
version = "0.108.0";
5
6
src = fetchFromGitHub {
7
owner = "returntocorp";
8
repo = "semgrep";
9
rev = "v${version}";
10
-
sha256 = "sha256-Vdrv7lVPsBsxkwwfviD5zRAdsD02RfWmM+IlaThduQs=";
11
};
12
13
# submodule dependencies
···
17
langsSrc = fetchFromGitHub {
18
owner = "returntocorp";
19
repo = "semgrep-langs";
20
-
rev = "98e4aacb0d58539b50a642a28d916a5d749e2a42";
21
-
sha256 = "sha256-7w+8vLmzqBjbeV+a4Br7kLQ2bJv3aZJw8cB0R9d/D+E=";
22
};
23
24
interfacesSrc = fetchFromGitHub {
25
owner = "returntocorp";
26
repo = "semgrep-interfaces";
27
-
rev = "bad298d06a5dc50e69b6818ba73f0cc9b9a17b58";
28
-
sha256 = "sha256-AgNSvjVsP4b4zwkmq6BoNcOX3xdCSnQmXK+fVSkDXxQ=";
29
};
30
31
# fetch pre-built semgrep-core since the ocaml build is complex and relies on
32
# the opam package manager at some point
33
coreRelease = if stdenv.isDarwin then fetchzip {
34
url = "https://github.com/returntocorp/semgrep/releases/download/v${version}/semgrep-v${version}-osx.zip";
35
-
sha256 = "sha256-f3ah4yGvtUL3Ievz+3hhh5Am1YMplRxsRQzdRAoF9uU=";
36
} else fetchzip {
37
url = "https://github.com/returntocorp/semgrep/releases/download/v${version}/semgrep-v${version}-ubuntu-16.04.tgz";
38
-
sha256 = "sha256-qie9svlzRoAsI33W+Sxh4YTVk1iPV0NVXfzfKlEUul4=";
39
};
40
41
meta = with lib; {
···
1
{ lib, fetchFromGitHub, fetchzip, stdenv }:
2
3
rec {
4
+
version = "0.112.1";
5
6
src = fetchFromGitHub {
7
owner = "returntocorp";
8
repo = "semgrep";
9
rev = "v${version}";
10
+
sha256 = "sha256-SZtxZz4x6YUKw1uO5HQTU4lRY989SoCNsPQphJr+L0Y=";
11
};
12
13
# submodule dependencies
···
17
langsSrc = fetchFromGitHub {
18
owner = "returntocorp";
19
repo = "semgrep-langs";
20
+
rev = "91e288062eb794e8a5e6967d1009624237793491";
21
+
sha256 = "sha256-z2t2bTRyj5zu9h/GBg2YeRFimpJsd3dA7dK8VBaKzHo=";
22
};
23
24
interfacesSrc = fetchFromGitHub {
25
owner = "returntocorp";
26
repo = "semgrep-interfaces";
27
+
rev = "7bc457a32e088ef21adf1529fa0ddeea634b9131";
28
+
sha256 = "sha256-xN8Qm1/YLa49k9fZKDoPPmHASI2ipI3mkKlwEK2ajO4=";
29
};
30
31
# fetch pre-built semgrep-core since the ocaml build is complex and relies on
32
# the opam package manager at some point
33
coreRelease = if stdenv.isDarwin then fetchzip {
34
url = "https://github.com/returntocorp/semgrep/releases/download/v${version}/semgrep-v${version}-osx.zip";
35
+
sha256 = "sha256-JiOH39vMDL6r9WKuPO0CDkRwGZtzl/GIFoSegVddFpw=";
36
} else fetchzip {
37
url = "https://github.com/returntocorp/semgrep/releases/download/v${version}/semgrep-v${version}-ubuntu-16.04.tgz";
38
+
sha256 = "sha256-V6r+VQrgz8uVSbRa2AmW4lnLxovk63FL7LqVKD46RBw=";
39
};
40
41
meta = with lib; {
+9
-5
pkgs/tools/security/semgrep/default.nix
+9
-5
pkgs/tools/security/semgrep/default.nix
···
4
, semgrep-core
5
, buildPythonApplication
6
, pythonPackages
7
8
, pytestCheckHook
9
, git
···
19
20
SEMGREP_CORE_BIN = "${semgrep-core}/bin/semgrep-core";
21
22
-
postPatch = ''
23
-
substituteInPlace setup.py \
24
-
--replace "typing-extensions~=4.2" "typing-extensions" \
25
-
--replace "jsonschema~=3.2" "jsonschema" \
26
-
--replace "boltons~=21.0" "boltons"
27
28
# remove git submodule placeholders
29
rm -r ./src/semgrep/{lang,semgrep_interfaces}
30
# link submodule dependencies
···
4
, semgrep-core
5
, buildPythonApplication
6
, pythonPackages
7
+
, pythonRelaxDepsHook
8
9
, pytestCheckHook
10
, git
···
20
21
SEMGREP_CORE_BIN = "${semgrep-core}/bin/semgrep-core";
22
23
+
nativeBuildInputs = [ pythonRelaxDepsHook ];
24
+
pythonRelaxDeps = [
25
+
"attrs"
26
+
"boltons"
27
+
"jsonschema"
28
+
"typing-extensions"
29
+
];
30
31
+
postPatch = ''
32
# remove git submodule placeholders
33
rm -r ./src/semgrep/{lang,semgrep_interfaces}
34
# link submodule dependencies