···

       
2
       
 
       
  lib,

     

       
3
       
 
       
  buildGoModule,

     

       
4
       
 
       
  fetchFromGitHub,

     

       
0
       
 
       

     

       
5
       
 
       
  installShellFiles,

     

       
0
       
 
       

     

       
0
       
 
       

     

       
6
       
 
       
}:

     

       
7
       
 
       


     

       
8
       
-
       
buildGoModule rec {

     

       
9
       
 
       
  pname = "kube-bench";

     

       
10
       
-
       
  version = "0.10.7";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
11
       
 
       


     

       
12
       
 
       
  src = fetchFromGitHub {

     

       
13
       
 
       
    owner = "aquasecurity";

     

       
14
       
 
       
    repo = "kube-bench";

     

       
15
       
-
       
    tag = "v${version}";

     

       
16
       
-
       
    hash = "sha256-5QY7rDFv6UV5qIdgKUGkb1DYZYid3POgEzPwSPKtHDU=";

     

       
17
       
 
       
  };

     

       
18
       
 
       


     

       
19
       
-
       
  vendorHash = "sha256-fmhlqPizAIVVzJAIHfY2gtCpJZY5Sx1Uih/7m7YEM98=";

     

       
20
       
 
       


     

       
21
       
 
       
  nativeBuildInputs = [ installShellFiles ];

     

       
22
       
 
       


     

       
23
       
 
       
  ldflags = [

     

       
24
       
 
       
    "-s"

     

       
25
       
 
       
    "-w"

     

       
26
       
-
       
    "-X github.com/aquasecurity/kube-bench/cmd.KubeBenchVersion=v${version}"

     

       
27
       
 
       
  ];

     

       
28
       
 
       


     

       
29
       
 
       
  postInstall = ''

     
···

       
36
       
 
       
      --zsh <($out/bin/kube-bench completion zsh)

     

       
37
       
 
       
  '';

     

       
38
       
 
       


     

       
0
       
 
       

     

       
39
       
 
       
  doInstallCheck = true;

     

       
40
       
-
       
  installCheckPhase = ''

     

       
41
       
-
       
    runHook preInstallCheck

     

       
42
       
-
       
    $out/bin/kube-bench --help

     

       
43
       
-
       
    $out/bin/kube-bench version | grep "v${version}"

     

       
44
       
-
       
    runHook postInstallCheck

     

       
45
       
-
       
  '';

     

       
46
       
 
       


     

       
47
       
 
       
  meta = {

     

       
48
       
 
       
    homepage = "https://github.com/aquasecurity/kube-bench";

     

       
49
       
-
       
    changelog = "https://github.com/aquasecurity/kube-bench/releases/tag/v${version}";

     

       
50
       
 
       
    description = "Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark";

     

       
51
       
 
       
    mainProgram = "kube-bench";

     

       
52
       
 
       
    license = lib.licenses.asl20;

     

       
53
       
 
       
    maintainers = with lib.maintainers; [ jk ];

     

       
54
       
 
       
  };

     

       
55
       
-
       
}

     

···

       
2
       
 
       
  lib,

     

       
3
       
 
       
  buildGoModule,

     

       
4
       
 
       
  fetchFromGitHub,

     

       
5
       
+
       


     

       
6
       
 
       
  installShellFiles,

     

       
7
       
+
       


     

       
8
       
+
       
  versionCheckHook,

     

       
9
       
 
       
}:

     

       
10
       
 
       


     

       
11
       
+
       
buildGoModule (finalAttrs: {

     

       
12
       
 
       
  pname = "kube-bench";

     

       
13
       
+
       
  version = "0.11.1";

     

       
14
       
+
       


     

       
15
       
+
       
  __darwinAllowLocalNetworking = true; # required for tests

     

       
16
       
 
       


     

       
17
       
 
       
  src = fetchFromGitHub {

     

       
18
       
 
       
    owner = "aquasecurity";

     

       
19
       
 
       
    repo = "kube-bench";

     

       
20
       
+
       
    tag = "v${finalAttrs.version}";

     

       
21
       
+
       
    hash = "sha256-3P5Cgnq7a/02c8zE6Rx1CUSwaq9K9EjfF0/AwarO4UE=";

     

       
22
       
 
       
  };

     

       
23
       
 
       


     

       
24
       
+
       
  vendorHash = "sha256-xgvK6se9f0c6pI3+rcj0+/bogvSYJkyMzVGrwv2gi84=";

     

       
25
       
 
       


     

       
26
       
 
       
  nativeBuildInputs = [ installShellFiles ];

     

       
27
       
 
       


     

       
28
       
 
       
  ldflags = [

     

       
29
       
 
       
    "-s"

     

       
30
       
 
       
    "-w"

     

       
31
       
+
       
    "-X github.com/aquasecurity/kube-bench/cmd.KubeBenchVersion=v${finalAttrs.version}"

     

       
32
       
 
       
  ];

     

       
33
       
 
       


     

       
34
       
 
       
  postInstall = ''

     
···

       
41
       
 
       
      --zsh <($out/bin/kube-bench completion zsh)

     

       
42
       
 
       
  '';

     

       
43
       
 
       


     

       
44
       
+
       
  nativeInstallCheckInputs = [ versionCheckHook ];

     

       
45
       
 
       
  doInstallCheck = true;

     

       
46
       
+
       
  versionCheckProgramArg = "version";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
47
       
 
       


     

       
48
       
 
       
  meta = {

     

       
49
       
 
       
    homepage = "https://github.com/aquasecurity/kube-bench";

     

       
50
       
+
       
    changelog = "https://github.com/aquasecurity/kube-bench/releases/tag/v${finalAttrs.version}";

     

       
51
       
 
       
    description = "Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark";

     

       
52
       
 
       
    mainProgram = "kube-bench";

     

       
53
       
 
       
    license = lib.licenses.asl20;

     

       
54
       
 
       
    maintainers = with lib.maintainers; [ jk ];

     

       
55
       
 
       
  };

     

       
56
       
+
       
})