tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
1{
2 lib,
3 boto3,
4 botocore,
5 buildPythonPackage,
6 cached-property,
7 click,
8 click-option-group,
9 fetchFromGitHub,
10 jinja2,
11 markdown,
12 policy-sentry,
13 pytestCheckHook,
14 pyyaml,
15 schema,
16 setuptools,
17}:
18
19buildPythonPackage rec {
20 pname = "cloudsplaining";
21 version = "0.8.2";
22 pyproject = true;
23
24 src = fetchFromGitHub {
25 owner = "salesforce";
26 repo = "cloudsplaining";
27 tag = version;
28 hash = "sha256-Abp/uvH1IYO/rb2o+7uI0Ef6q7K6T0kN1mo+Qit438E=";
29 };
30
31 pythonRelaxDeps = true;
32
33 build-system = [ setuptools ];
34
35 dependencies = [
36 boto3
37 botocore
38 cached-property
39 click
40 click-option-group
41 jinja2
42 markdown
43 policy-sentry
44 pyyaml
45 schema
46 ];
47
48 nativeCheckInputs = [ pytestCheckHook ];
49
50 disabledTests = [
51 "test_policy_expansion"
52 "test_statement_details_for_allow_not_action"
53 ];
54
55 pythonImportsCheck = [ "cloudsplaining" ];
56
57 meta = {
58 description = "Python module for AWS IAM security assessment";
59 homepage = "https://github.com/salesforce/cloudsplaining";
60 changelog = "https://github.com/salesforce/cloudsplaining/releases/tag/${src.tag}";
61 license = lib.licenses.bsd3;
62 maintainers = with lib.maintainers; [ fab ];
63 mainProgram = "cloudsplaining";
64 };
65}