tjh.dev
1{ buildPythonPackage
2, fetchPypi
3, lib
4, isPy3k
5
6# pythonPackages
7, GitPython
8, pbr
9, pyyaml
10, six
11, stevedore
12}:
13
14buildPythonPackage rec {
15 pname = "bandit";
16 version = "1.6.2";
17 disabled = !isPy3k;
18
19 src = fetchPypi {
20 inherit pname version;
21 sha256 = "0rb034c99pyhb4a60z7f2kz40cjydhm8m9v2blaal1rmhlam7rs1";
22 };
23
24 propagatedBuildInputs = [
25 GitPython
26 pbr
27 pyyaml
28 six
29 stevedore
30 ];
31
32 # Framework is Tox, tox performs 'pip install' inside the virtual-env
33 # and this requires Network Connectivity
34 doCheck = false;
35
36 meta = {
37 description = "Security oriented static analyser for python code";
38 homepage = "https://bandit.readthedocs.io/en/latest/";
39 license = lib.licenses.asl20;
40 maintainers = with lib.maintainers; [
41 kamadorueda
42 ];
43 };
44}