diff options
| author | 06kellyjac <dev@j-k.io> | 2022-03-04 16:40:41 +0000 |
|---|---|---|
| committer | 06kellyjac <dev@j-k.io> | 2022-03-04 16:40:41 +0000 |
| commit | b489e63c3c62ab21ece235a9b5a4b9a4c7aede5b (patch) | |
| tree | 60a8e8507ade8129e9f93e7cb01396bab8d4404e /pkgs/tools/security/cosign/default.nix | |
| parent | 7e047125d12b8fef4756b606f031c8c2143f21bd (diff) | |
| download | nixpkgs-b489e63c3c62ab21ece235a9b5a4b9a4c7aede5b.tar nixpkgs-b489e63c3c62ab21ece235a9b5a4b9a4c7aede5b.tar.gz nixpkgs-b489e63c3c62ab21ece235a9b5a4b9a4c7aede5b.tar.bz2 nixpkgs-b489e63c3c62ab21ece235a9b5a4b9a4c7aede5b.tar.lz nixpkgs-b489e63c3c62ab21ece235a9b5a4b9a4c7aede5b.tar.xz nixpkgs-b489e63c3c62ab21ece235a9b5a4b9a4c7aede5b.tar.zst nixpkgs-b489e63c3c62ab21ece235a9b5a4b9a4c7aede5b.zip | |
cosign: 1.5.2 -> 1.6.0
Co-authored-by: Thomas Gerbet <thomas@gerbet.me>
Diffstat (limited to 'pkgs/tools/security/cosign/default.nix')
| -rw-r--r-- | pkgs/tools/security/cosign/default.nix | 35 |
1 files changed, 26 insertions, 9 deletions
diff --git a/pkgs/tools/security/cosign/default.nix b/pkgs/tools/security/cosign/default.nix index 5bfc16718bf..63d36e99032 100644 --- a/pkgs/tools/security/cosign/default.nix +++ b/pkgs/tools/security/cosign/default.nix @@ -2,13 +2,13 @@ buildGoModule rec { pname = "cosign"; - version = "1.5.2"; + version = "1.6.0"; src = fetchFromGitHub { owner = "sigstore"; repo = pname; rev = "v${version}"; - sha256 = "sha256-37jahAGgQn7HwwdRTlAS/oJQ3BxTkMViI6iJMBYFgjI="; + sha256 = "sha256-jAkTIO+tmb1vjS2eRWU9Fau7qzPCBlXJCk00iwNpULE="; }; buildInputs = lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite) @@ -16,19 +16,36 @@ buildGoModule rec { nativeBuildInputs = [ pkg-config installShellFiles ]; - vendorSha256 = "sha256-d3aOX4iMlhlxgYbqCHCIFKXunVha0Fw4ZBmy4OA6EhI="; + vendorSha256 = "sha256-E9zeRlPIIoXo/EfagHC3aDnW747SdsPiqIA384D7NQI="; - excludedPackages = "\\(sample\\|webhook\\|help\\)"; + subPackages = [ + "cmd/cosign" + "cmd/cosign/webhook" + "cmd/sget" + ]; tags = [] ++ lib.optionals pivKeySupport [ "pivkey" ] ++ lib.optionals pkcs11Support [ "pkcs11key" ]; - ldflags = [ "-s" "-w" "-X github.com/sigstore/cosign/pkg/version.GitVersion=v${version}" ]; + ldflags = [ + "-s" + "-w" + "-X sigs.k8s.io/release-utils/version.gitVersion=v${version}" + "-X sigs.k8s.io/release-utils/version.gitTreeState=clean" + ]; - postPatch = '' - rm pkg/cosign/tuf/client_test.go # Require network access - rm internal/pkg/cosign/fulcio/signer_test.go # Require network access - rm internal/pkg/cosign/rekor/signer_test.go # Require network access + postBuild = '' + # cmd/cosign/webhook should be called cosigned + mv $GOPATH/bin/{webhook,cosigned} + ''; + + preCheck = '' + # test all paths + unset subPackages + + rm cmd/cosign/cli/fulcio/fulcioroots/fulcioroots_test.go # Require network access rm pkg/cosign/kubernetes/webhook/validator_test.go # Require network access + rm pkg/cosign/tlog_test.go # Require network access + rm pkg/cosign/tuf/client_test.go # Require network access ''; postInstall = '' |