tjh.dev
1{ stdenv, buildPythonPackage, fetchPypi, fetchpatch, cryptography, boto3, pyyaml, docutils }:
2
3buildPythonPackage rec {
4 pname = "credstash";
5 version = "1.14.0";
6
7 src = fetchPypi {
8 inherit pname version;
9 sha256 = "718b337f7a6fa001e014386071f05c59900525d0507009126d2fe8d75fe0761d";
10 };
11
12 patches = fetchpatch {
13 url = https://github.com/fugue/credstash/pull/178.patch;
14 sha256 = "15ih4h5v63g7qfmqdl4zca147wkcrx8vnsh4ns33001dipcfb5sc";
15 excludes = [ ".travis.yml" ];
16 };
17
18 propagatedBuildInputs = [ cryptography boto3 pyyaml docutils ];
19
20 # No tests in archive
21 doCheck = false;
22
23 meta = with stdenv.lib; {
24 description = "A utility for managing secrets in the cloud using AWS KMS and DynamoDB";
25 homepage = https://github.com/LuminalOSS/credstash;
26 license = licenses.asl20;
27 };
28}