Merge pull request #240885 from aaronjheng/secretscanner

secretscanner: 20210214-42a38f9 -> 1.2.0

pkgs/tools/security/secretscanner/default.nix

@@ -3,25 +3,44 @@
 , fetchFromGitHub
 , hyperscan
 , pkg-config
+, protobuf
+, protoc-gen-go
+, protoc-gen-go-grpc
 }:
 
 buildGoModule rec {
   pname = "secretscanner";
-  version = "20210214-${lib.strings.substring 0 7 rev}";
-  rev = "42a38f9351352bf6240016b5b93d971be35cad46";
+  version = "1.2.0";
 
   src = fetchFromGitHub {
     owner = "deepfence";
     repo = "SecretScanner";
-    inherit rev;
-    sha256 = "0yga71f7bx5a3hj5agr88pd7j8jnxbwqm241fhrvv8ic4sx0mawg";
+    rev = "refs/tags/v${version}";
+    fetchSubmodules = true;
+    hash = "sha256-lTUZLuEiC9xpHYWn3uv4ZtbvHX6ETsjxacjd/O0kU8I=";
   };
 
-  vendorSha256 = "0b7qa83iqnigihgwlqsxi28n7d9h0dk3wx1bqvhn4k01483cipsd";
+  vendorHash = "sha256-lB+fiSdflIYGw0hMN0a9IOtRcJwYEUPQqaeU7mAfSQs=";
 
-  nativeBuildInputs = [ pkg-config ];
+  excludedPackages = [
+    "./agent-plugins-grpc/proto" # No need to build submodules
+  ];
 
-  buildInputs = [ hyperscan ];
+  nativeBuildInputs = [
+    pkg-config
+    protobuf
+    protoc-gen-go
+    protoc-gen-go-grpc
+  ];
+
+  buildInputs = [
+    hyperscan
+  ];
+
+  preBuild = ''
+    # Compile proto files
+    make -C agent-plugins-grpc go
+  '';
 
   postInstall = ''
     mv $out/bin/SecretScanner $out/bin/$pname
@@ -30,6 +49,7 @@ buildGoModule rec {
   meta = with lib; {
     description = "Tool to find secrets and passwords in container images and file systems";
     homepage = "https://github.com/deepfence/SecretScanner";
+    changelog = "https://github.com/deepfence/SecretScanner/releases/tag/v${version}";
     license = with licenses; [ mit ];
     maintainers = with maintainers; [ fab ];
   };