tjh.dev
1{
2 lib,
3 buildGoModule,
4 fetchFromGitHub,
5 nix-update-script,
6}:
7
8buildGoModule (finalAttrs: {
9 pname = "capslock";
10 version = "0.2.7";
11
12 src = fetchFromGitHub {
13 owner = "google";
14 repo = "capslock";
15 rev = "v${finalAttrs.version}";
16 hash = "sha256-kRuEcrx9LBzCpXFWlc9bSsgZt84T8R8VFdbAWAseSPQ=";
17 };
18
19 vendorHash = "sha256-CUw4ukSAs12dprgcQRfdoKzY7gbzUCHk0t2SrUMtrxo=";
20
21 subPackages = [ "cmd/capslock" ];
22
23 env.CGO_ENABLED = "0";
24
25 ldflags = [ "-s" ];
26
27 passthru.updateScript = nix-update-script { };
28
29 meta = {
30 description = "Capability analysis CLI for Go packages that informs users of which privileged operations a given package can access";
31 homepage = "https://github.com/google/capslock";
32 license = lib.licenses.bsd3;
33 mainProgram = "capslock";
34 maintainers = with lib.maintainers; [ katexochen ];
35 };
36})