From 0e79b157e14be99675e111b1cecb689bf9e07dd6 Mon Sep 17 00:00:00 2001
From: ocfox <i@ocfox.me>
Date: Tue, 4 Apr 2023 13:04:34 +0800
Subject: [PATCH] checkov: 2.3.96 -> 2.3.150

---
 .../tools/analysis/checkov/default.nix        | 28 ++++++++++---------
 1 file changed, 15 insertions(+), 13 deletions(-)

diff --git a/pkgs/development/tools/analysis/checkov/default.nix b/pkgs/development/tools/analysis/checkov/default.nix
index 1602fcea018d..4340c9a54957 100644
--- a/pkgs/development/tools/analysis/checkov/default.nix
+++ b/pkgs/development/tools/analysis/checkov/default.nix
@@ -6,16 +6,15 @@
 let
   py = python3.override {
     packageOverrides = self: super: {
-
-      dpath = super.dpath.overridePythonAttrs (oldAttrs: rec {
-        version = "1.5.0";
-        src = oldAttrs.src.override {
-          inherit version;
-          hash = "sha256-SWYVtOqEI20Y4NKGEi3nSGmmDg+H4sfsZ4f/KGxINhs=";
+      cyclonedx-python-lib = super.cyclonedx-python-lib.overridePythonAttrs (oldAttrs: rec {
+        version = "2.7.1";
+        src = fetchFromGitHub {
+          owner = "CycloneDX";
+          repo = "cyclonedx-python-lib";
+          rev = "v${version}";
+          hash = "sha256-c/KhoJOa121/h0n0GUazjUFChnUo05ThD+fuZXc5/Pk=";
         };
-        doCheck = false;
       });
-
     };
   };
 in
@@ -23,14 +22,14 @@ with py.pkgs;
 
 buildPythonApplication rec {
   pname = "checkov";
-  version = "2.3.96";
+  version = "2.3.150";
   format = "setuptools";
 
   src = fetchFromGitHub {
     owner = "bridgecrewio";
     repo = pname;
     rev = "refs/tags/${version}";
-    hash = "sha256-jQ5VaOvJkxhZ0fHrNmkuFK+qmRUNdzR5XCWqWv1iBs4=";
+    hash = "sha256-AgYI3V5xJT6LEZYrJV8nO/86MMp5deuTdLhnUHdrge4=";
   };
 
   patches = [
@@ -38,17 +37,19 @@ buildPythonApplication rec {
   ];
 
   pythonRelaxDeps = [
+    "dpath"
+    "bc-detect-secrets"
     "bc-python-hcl2"
     "pycep-parser"
     "networkx"
   ];
 
-  nativeBuildInputs = with py.pkgs; [
+  nativeBuildInputs = [
     pythonRelaxDepsHook
     setuptools-scm
   ];
 
-  propagatedBuildInputs = with py.pkgs; [
+  propagatedBuildInputs = [
     aiodns
     aiohttp
     aiomultiprocess
@@ -74,6 +75,7 @@ buildPythonApplication rec {
     jsonschema
     junit-xml
     networkx
+    openai
     packaging
     policyuniverse
     prettytable
@@ -87,7 +89,7 @@ buildPythonApplication rec {
     update_checker
   ];
 
-  nativeCheckInputs = with py.pkgs; [
+  nativeCheckInputs = [
     aioresponses
     mock
     pytest-asyncio