tjh.dev
1{ lib
2, fetchFromGitHub
3, buildGoModule
4}:
5
6buildGoModule rec {
7 pname = "slsa-verifier";
8 version = "2.3.0";
9
10 src = fetchFromGitHub {
11 owner = "slsa-framework";
12 repo = "slsa-verifier";
13 rev = "v${version}";
14 hash = "sha256-qhBMWYyd2S8ZKAqwMkXWTP84kLt3f4471JOPrfScFek=";
15 };
16
17 vendorHash = "sha256-9EY7zhvDgZsNQA7iNu1zueJxpTA6cLwjpQYjUdUy6do=";
18
19 CGO_ENABLED = 0;
20 GO111MODULE = "on";
21 GOFLAGS = "-trimpath";
22
23 subPackages = [ "cli/slsa-verifier" ];
24
25 tags = [ "netgo" ];
26
27 ldflags = [
28 "-s"
29 "-w"
30 "-buildid="
31 "-X sigs.k8s.io/release-utils/version.gitVersion=${version}"
32 ];
33
34 doCheck = false;
35
36 meta = {
37 homepage = "https://github.com/slsa-framework/slsa-verifier";
38 changelog = "https://github.com/slsa-framework/slsa-verifier/releases/tag/v${version}";
39 description = "Verify provenance from SLSA compliant builders";
40 license = lib.licenses.asl20;
41 maintainers = with lib.maintainers; [ developer-guy mlieberman85 ];
42 };
43}