gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

python313Packages.pysigma: 0.11.23 -> 1.0.2 (#473396)

Browse Source
This commit is contained in:
Fabian Affolter
2025-12-25 09:31:11 +00:00
committed by GitHub
parent 9e5e7f75b7 c0899ea6b8
commit 2075ea1c38
14 changed files with 160 additions and 135 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/by-name/si/sigma-cli/package.nix
+6 -36
View File
@@ -2,24 +2,22 @@
lib,
fetchFromGitHub,
python3,
writableTmpDirAsHomeHook,
}:
python3.pkgs.buildPythonApplication rec {
pname = "sigma-cli";
version = "1.0.6";
version = "2.0.0";
pyproject = true;
src = fetchFromGitHub {
owner = "SigmaHQ";
repo = "sigma-cli";
tag = "v${version}";
hash = "sha256-BINKEptzdfEJPJAfPoYWiDXdmVnG7NYVaQar7dz4Ptk=";
hash = "sha256-styE30IO5g3KoJ3IxdYiiu9xqh0OeD59WWcLk42wOCo=";
};
postPatch = ''
substituteInPlace pyproject.toml \
--replace '= "^' '= ">='
'';
pythonRelaxDeps = [ "click" ];
build-system = with python3.pkgs; [ poetry-core ];
@@ -39,36 +37,8 @@ python3.pkgs.buildPythonApplication rec {
pysigma-pipeline-windows
];
nativeCheckInputs = with python3.pkgs; [
pytest-cov-stub
pytestCheckHook
];
disabledTests = [
"test_plugin_list"
"test_plugin_list_filtered"
"test_plugin_list_search"
"test_plugin_install_notexisting"
"test_plugin_install"
"test_plugin_uninstall"
"test_backend_option_unknown_by_backend"
# Tests require network access
"test_check_with_issues"
"test_plugin_show_identifier"
"test_plugin_show_nonexisting"
"test_plugin_show_uuid"
# Tests compare STDOUT results
"test_check_valid"
"test_check_stdin"
"test_check_exclude"
];
disabledTestPaths = [
# AssertionError
"tests/test_analyze.py"
"tests/test_convert.py"
"tests/test_filters.py"
];
# Starting with 2.0.0 the tests wants to fetch the MITRE data
doCheck = false;
pythonImportsCheck = [ "sigma.cli" ];
pkgs/development/python-modules/diskcache-stubs/default.nix
+37
View File
@@ -0,0 +1,37 @@
{
lib,
buildPythonPackage,
fetchFromGitHub,
hatchling,
typing-extensions,
}:
buildPythonPackage rec {
pname = "diskcache-stubs";
version = "5.6.3.6";
pyproject = true;
src = fetchFromGitHub {
owner = "phi-friday";
repo = "diskcache-stubs";
tag = "v${version}";
hash = "sha256-yYds/00K9XyJirreBGG/r30HZTyBQbFa6N4EizsmdKg=";
};
build-system = [ hatchling ];
dependencies = [ typing-extensions ];
pythonImportsCheck = [ "diskcache-stubs" ];
# Module has no tests
doCheck = false;
meta = {
description = "Diskcache stubs";
homepage = "https://github.com/phi-friday/diskcache-stubs";
changelog = "https://github.com/phi-friday/diskcache-stubs/releases/tag/${src.tag}";
license = lib.licenses.asl20;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma-backend-elasticsearch/default.nix
+8 -13
View File
@@ -6,22 +6,20 @@
pysigma,
pytest-cov-stub,
pytestCheckHook,
pythonOlder,
requests,
writableTmpDirAsHomeHook,
}:
buildPythonPackage rec {
pname = "pysigma-backend-elasticsearch";
version = "1.1.6";
version = "2.0.0";
pyproject = true;
disabled = pythonOlder "3.8";
src = fetchFromGitHub {
owner = "SigmaHQ";
repo = "pySigma-backend-elasticsearch";
tag = "v${version}";
hash = "sha256-v+OTMcSvFXfjm4R3wCgLRCG0yKNqvY1mgRcmq2Jws0s=";
hash = "sha256-2gWYGu+Xr4R7QKEBiL5rXd/2HNinazyrF1OKzte0B3g=";
};
build-system = [ poetry-core ];
@@ -32,21 +30,18 @@ buildPythonPackage rec {
pytest-cov-stub
pytestCheckHook
requests
writableTmpDirAsHomeHook
];
pythonImportsCheck = [ "sigma.backends.elasticsearch" ];
# Starting with 2.0.0 all tests require network access
doCheck = false;
disabledTests = [
# Tests requires network access
"test_connect_lucene"
# AssertionError
"correlation_rule_stats"
];
#pythonImportsCheck = [ "sigma.backends.elasticsearch" ];
meta = {
description = "Library to support Elasticsearch for pySigma";
homepage = "https://github.com/SigmaHQ/pySigma-backend-elasticsearch";
changelog = "https://github.com/SigmaHQ/pySigma-backend-elasticsearch/releases/tag/v${version}";
changelog = "https://github.com/SigmaHQ/pySigma-backend-elasticsearch/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
pkgs/development/python-modules/pysigma-backend-insightidr/default.nix
+38 -9
View File
@@ -5,15 +5,12 @@
poetry-core,
pysigma,
pytestCheckHook,
pythonOlder,
}:
buildPythonPackage rec {
pname = "pysigma-backend-insightidr";
version = "0.2.4";
format = "pyproject";
disabled = pythonOlder "3.8";
pyproject = true;
src = fetchFromGitHub {
owner = "SigmaHQ";
@@ -22,11 +19,9 @@ buildPythonPackage rec {
hash = "sha256-dc25zDYQeU9W9qwrRz7zsM2wOl8kMapDvwFhB6VOwhY=";
};
nativeBuildInputs = [
poetry-core
];
build-system = [ poetry-core ];
propagatedBuildInputs = [ pysigma ];
dependencies = [ pysigma ];
pythonRelaxDeps = [ "pysigma" ];
@@ -37,10 +32,44 @@ buildPythonPackage rec {
"sigma.pipelines.insight_idr"
];
disabledTests = [
# Tests are outdated
"est_insight_idr_pipeline_dns_field_mapping"
"test_insight_idr_base64_query"
"test_insight_idr_cidr_query"
"test_insight_idr_condition_nested_logic"
"test_insight_idr_contains_all_query"
"test_insight_idr_contains_any_query"
"test_insight_idr_endswith_any_query"
"test_insight_idr_keyword_and_query"
"test_insight_idr_keyword_or_query"
"test_insight_idr_leql_advanced_search_output_format"
"test_insight_idr_leql_detection_definition_output_format"
"test_insight_idr_multi_selection_same_field"
"test_insight_idr_not_1_of_filter_condition"
"test_insight_idr_not_condition_query"
"test_insight_idr_pipeline_process_creation_field_mapping"
"test_insight_idr_pipeline_simple"
"test_insight_idr_pipeline_unsupported_aggregate_conditions_rule_type"
"test_insight_idr_pipeline_web_proxy_field_mapping"
"test_insight_idr_re_query"
"test_insight_idr_simple_contains_query"
"test_insight_idr_simple_endswith_query"
"test_insight_idr_simple_eq_nocase_query"
"test_insight_idr_simple_startswith_query"
"test_insight_idr_single_quote"
"test_insight_idr_startswith_any_query"
"test_insight_idr_triple_quote"
"test_insight_idr_value_eq_and_query"
"test_insight_idr_value_eq_or_query"
"test_insight_idr_value_in_list_query"
];
meta = {
description = "Library to support the Rapid7 InsightIDR backend for pySigma";
homepage = "https://github.com/SigmaHQ/pySigma-backend-insightidr";
license = with lib.licenses; [ lgpl21Only ];
changelog = "https://github.com/SigmaHQ/pySigma-backend-insightidr/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma-backend-loki/default.nix
+4 -3
View File
@@ -9,14 +9,14 @@
buildPythonPackage rec {
pname = "pysigma-backend-loki";
version = "0.12.4";
version = "0.13.0";
pyproject = true;
src = fetchFromGitHub {
owner = "grafana";
repo = "pySigma-backend-loki";
tag = "v${version}";
hash = "sha256-2VgrIJocFtMFZCTyPQZcSnNJ5XgfD+nbmJ1wvesrQoE=";
hash = "sha256-36fdFuvUSAeGyV5z55/MGcdMiCNz12EbiRw87MjmaKY=";
};
build-system = [ poetry-core ];
@@ -37,6 +37,7 @@ buildPythonPackage rec {
meta = {
description = "Library to support the loki backend for pySigma";
homepage = "https://github.com/grafana/pySigma-backend-loki";
license = with lib.licenses; [ lgpl21Only ];
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma-backend-opensearch/default.nix
+6 -20
View File
@@ -5,24 +5,18 @@
poetry-core,
pysigma,
pysigma-backend-elasticsearch,
pytest-cov-stub,
pytestCheckHook,
pythonOlder,
requests,
}:
buildPythonPackage rec {
pname = "pysigma-backend-opensearch";
version = "1.0.4";
version = "2.0.0";
pyproject = true;
disabled = pythonOlder "3.8";
src = fetchFromGitHub {
owner = "SigmaHQ";
repo = "pySigma-backend-opensearch";
tag = "v${version}";
hash = "sha256-VKDyXTvh0T/MKqsZo9lAlHyfhtiXzP5P+d0DSiLqS1o=";
hash = "sha256-N1Gs/L2kCcKkhHYXCyfmentvl1RORUrWIEyxTEsvNKg=";
};
pythonRelaxDeps = [ "pysigma" ];
@@ -34,23 +28,15 @@ buildPythonPackage rec {
pysigma-backend-elasticsearch
];
nativeCheckInputs = [
pytest-cov-stub
pytestCheckHook
requests
];
# Starting with 2.0.0 all tests require network access
doCheck = false;
pythonImportsCheck = [ "sigma.backends.opensearch" ];
disabledTests = [
# Tests requires network access
"test_connect_lucene"
];
#pythonImportsCheck = [ "sigma.backends.opensearch" ];
meta = {
description = "Library to support OpenSearch for pySigma";
homepage = "https://github.com/SigmaHQ/pySigma-backend-opensearch";
changelog = "https://github.com/SigmaHQ/pySigma-backend-opensearch/releases/tag/v${version}";
changelog = "https://github.com/SigmaHQ/pySigma-backend-opensearch/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
pkgs/development/python-modules/pysigma-backend-qradar/default.nix
+5 -10
View File
@@ -6,15 +6,12 @@
pysigma,
pysigma-pipeline-sysmon,
pytestCheckHook,
pythonOlder,
}:
buildPythonPackage rec {
pname = "pysigma-backend-qradar";
version = "0.3.3";
format = "pyproject";
disabled = pythonOlder "3.8";
pyproject = true;
src = fetchFromGitHub {
owner = "nNipsx-Sec";
@@ -25,11 +22,9 @@ buildPythonPackage rec {
pythonRelaxDeps = [ "pysigma" ];
nativeBuildInputs = [
poetry-core
];
build-system = [ poetry-core ];
propagatedBuildInputs = [ pysigma ];
dependencies = [ pysigma ];
nativeCheckInputs = [
pysigma-pipeline-sysmon
@@ -41,8 +36,8 @@ buildPythonPackage rec {
meta = {
description = "Library to support Qradar for pySigma";
homepage = "https://github.com/nNipsx-Sec/pySigma-backend-qradar";
changelog = "https://github.com/nNipsx-Sec/pySigma-backend-qradar/releases/tag/v${version}";
license = with lib.licenses; [ lgpl21Only ];
changelog = "https://github.com/nNipsx-Sec/pySigma-backend-qradar/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma-backend-splunk/default.nix
+6 -9
View File
@@ -6,26 +6,23 @@
pysigma,
pysigma-pipeline-sysmon,
pytestCheckHook,
pythonOlder,
}:
buildPythonPackage rec {
pname = "pysigma-backend-splunk";
version = "1.1.3";
version = "2.0.0";
pyproject = true;
disabled = pythonOlder "3.8";
src = fetchFromGitHub {
owner = "SigmaHQ";
repo = "pySigma-backend-splunk";
tag = "v${version}";
hash = "sha256-zDv04yHYQP2ZKX9g4v7kR8l3OmAyvh7GtmmqjxPtFvI=";
hash = "sha256-SiEESeF0YqPYDAK3OUEkqSHmn4uM5LQrCLOHvOy26Io=";
};
nativeBuildInputs = [ poetry-core ];
build-system = [ poetry-core ];
propagatedBuildInputs = [ pysigma ];
dependencies = [ pysigma ];
nativeCheckInputs = [
pysigma-pipeline-sysmon
@@ -37,8 +34,8 @@ buildPythonPackage rec {
meta = {
description = "Library to support Splunk for pySigma";
homepage = "https://github.com/SigmaHQ/pySigma-backend-splunk";
changelog = "https://github.com/SigmaHQ/pySigma-backend-splunk/releases/tag/v${version}";
license = with lib.licenses; [ lgpl21Only ];
changelog = "https://github.com/SigmaHQ/pySigma-backend-splunk/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma-backend-sqlite/default.nix
+3 -1
View File
@@ -20,6 +20,8 @@ buildPythonPackage rec {
hash = "sha256-NBgpLP3/UUrW/qM24jUyV4MH5c/uCVAfInZ6AKcl1X0=";
};
pythonRelaxDeps = [ "pysigma" ];
build-system = [ poetry-core ];
dependencies = [ pysigma ];
@@ -35,7 +37,7 @@ buildPythonPackage rec {
description = "Library to support sqlite for pySigma";
homepage = "https://github.com/SigmaHQ/pySigma-backend-sqlite";
changelog = "https://github.com/SigmaHQ/pySigma-backend-sqlite/releases/tag/v${version}";
license = with lib.licenses; [ lgpl3Only ];
license = lib.licenses.lgpl3Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma-pipeline-crowdstrike/default.nix
+6 -7
View File
@@ -5,23 +5,22 @@
poetry-core,
pysigma,
pytestCheckHook,
pythonOlder,
}:
buildPythonPackage rec {
pname = "pysigma-pipeline-crowdstrike";
version = "2.0.1";
version = "3.0.0";
pyproject = true;
disabled = pythonOlder "3.8";
src = fetchFromGitHub {
owner = "SigmaHQ";
repo = "pySigma-pipeline-crowdstrike";
tag = "v${version}";
hash = "sha256-WYgT0tRXdSR4qJA7UHotPn9qfnpaIJaqASBXVDG1kOU=";
hash = "sha256-c7+4/55rrVVVdw2Yy8emoiWkyKlCgP4PKdAa1XW+aYM=";
};
pythonRelaxDeps = [ "pysigma" ];
build-system = [ poetry-core ];
dependencies = [ pysigma ];
@@ -38,8 +37,8 @@ buildPythonPackage rec {
meta = {
description = "Library to support CrowdStrike pipeline for pySigma";
homepage = "https://github.com/SigmaHQ/pySigma-pipeline-crowdstrike";
changelog = "https://github.com/SigmaHQ/pySigma-pipeline-crowdstrike/releases/tag/v${version}";
license = with lib.licenses; [ lgpl21Only ];
changelog = "https://github.com/SigmaHQ/pySigma-pipeline-crowdstrike/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma-pipeline-sysmon/default.nix
+6 -9
View File
@@ -5,26 +5,23 @@
poetry-core,
pysigma,
pytestCheckHook,
pythonOlder,
}:
buildPythonPackage rec {
pname = "pysigma-pipeline-sysmon";
version = "1.0.4";
version = "2.0.0";
pyproject = true;
disabled = pythonOlder "3.8";
src = fetchFromGitHub {
owner = "SigmaHQ";
repo = "pySigma-pipeline-sysmon";
tag = "v${version}";
hash = "sha256-/WBHu1pFEiVPJQ97xEwjJJ92h9kHzTBPgmfQrR+RZjA=";
hash = "sha256-W0KNsawcJ1XmQ2Tmh+aD8EUL2LenCQUEUgx9shQhRDQ=";
};
nativeBuildInputs = [ poetry-core ];
build-system = [ poetry-core ];
propagatedBuildInputs = [ pysigma ];
dependencies = [ pysigma ];
nativeCheckInputs = [ pytestCheckHook ];
@@ -33,8 +30,8 @@ buildPythonPackage rec {
meta = {
description = "Library to support Sysmon pipeline for pySigma";
homepage = "https://github.com/SigmaHQ/pySigma-pipeline-sysmon";
changelog = "https://github.com/SigmaHQ/pySigma-pipeline-sysmon/releases/tag/v${version}";
license = with lib.licenses; [ lgpl21Only ];
changelog = "https://github.com/SigmaHQ/pySigma-pipeline-sysmon/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma-pipeline-windows/default.nix
+7 -10
View File
@@ -5,26 +5,23 @@
poetry-core,
pysigma,
pytestCheckHook,
pythonOlder,
}:
buildPythonPackage rec {
pname = "pysigma-pipeline-windows";
version = "1.2.0";
format = "pyproject";
disabled = pythonOlder "3.8";
version = "2.0.0";
pyproject = true;
src = fetchFromGitHub {
owner = "SigmaHQ";
repo = "pySigma-pipeline-windows";
tag = "v${version}";
hash = "sha256-Ss0OMd8urCYQUlvsm/m8Kz0jY4pVSEoZuLxs1JLWxQA=";
hash = "sha256-2S4vWneBNKq/FwhDs4Iref9hvEbcqvG/MOSTMYd7crU=";
};
nativeBuildInputs = [ poetry-core ];
build-system = [ poetry-core ];
propagatedBuildInputs = [ pysigma ];
dependencies = [ pysigma ];
nativeCheckInputs = [ pytestCheckHook ];
@@ -33,8 +30,8 @@ buildPythonPackage rec {
meta = {
description = "Library to support Windows service pipeline for pySigma";
homepage = "https://github.com/SigmaHQ/pySigma-pipeline-windows";
changelog = "https://github.com/SigmaHQ/pySigma-pipeline-windows/releases/tag/v${version}";
license = with lib.licenses; [ lgpl21Only ];
changelog = "https://github.com/SigmaHQ/pySigma-pipeline-windows/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/development/python-modules/pysigma/default.nix
+26 -8
View File
@@ -1,52 +1,70 @@
{
lib,
buildPythonPackage,
diskcache-stubs,
diskcache,
fetchFromGitHub,
jinja2,
packaging,
poetry-core,
pyparsing,
pytestCheckHook,
pythonOlder,
pyyaml,
requests,
types-pyyaml,
typing-extensions,
writableTmpDirAsHomeHook,
}:
buildPythonPackage rec {
pname = "pysigma";
version = "0.11.23";
version = "1.0.2";
pyproject = true;
disabled = pythonOlder "3.8";
src = fetchFromGitHub {
owner = "SigmaHQ";
repo = "pySigma";
tag = "v${version}";
hash = "sha256-mRDevojeVHgp66RTB90XXeEGP8LYlWCLGmAMv9DW3SA=";
hash = "sha256-s/czHIwQzcDvK6PBEFflYnT0S97qDUoYiH5ZPlnhMGE=";
};
pythonRelaxDeps = [
"diskcache-stubs"
"jinja2"
"packaging"
"pyparsing"
"types-pyyaml"
];
build-system = [ poetry-core ];
dependencies = [
diskcache
diskcache-stubs
jinja2
packaging
pyparsing
pyyaml
requests
types-pyyaml
typing-extensions
];
nativeCheckInputs = [ pytestCheckHook ];
nativeCheckInputs = [
pytestCheckHook
writableTmpDirAsHomeHook
];
disabledTests = [
# Tests require network connection
"test_sigma_plugin_directory_default"
"test_sigma_plugin_directory_get_plugins_compatible"
"test_sigma_plugin_find_compatible_version"
"test_sigma_plugin_installation"
"test_sigma_plugin_pysigma_version_from_pypi"
"test_sigma_plugin_version_compatible"
"test_validator_valid_attack_tags_online"
"test_validator_valid_d3fend_tags_online"
];
pythonImportsCheck = [ "sigma" ];
@@ -54,8 +72,8 @@ buildPythonPackage rec {
meta = {
description = "Library to parse and convert Sigma rules into queries";
homepage = "https://github.com/SigmaHQ/pySigma";
changelog = "https://github.com/SigmaHQ/pySigma/releases/tag/v${version}";
license = with lib.licenses; [ lgpl21Only ];
changelog = "https://github.com/SigmaHQ/pySigma/releases/tag/${src.tag}";
license = lib.licenses.lgpl21Only;
maintainers = with lib.maintainers; [ fab ];
};
}
pkgs/top-level/python-packages.nix
+2
View File
@@ -3869,6 +3869,8 @@ self: super: with self; {
diskcache = callPackage ../development/python-modules/diskcache { };
diskcache-stubs = callPackage ../development/python-modules/diskcache-stubs { };
disnake = callPackage ../development/python-modules/disnake { };
disposable-email-domains = callPackage ../development/python-modules/disposable-email-domains { };