diff --git a/maintainers/maintainer-list.nix b/maintainers/maintainer-list.nix index 802370d286ed..78366a8fc6c4 100644 --- a/maintainers/maintainer-list.nix +++ b/maintainers/maintainer-list.nix @@ -9890,6 +9890,12 @@ fingerprint = "196A BFEC 6A1D D1EC 7594 F8D1 F625 47D0 75E0 9767"; }]; }; + patryk4815 = { + email = "patryk.sondej@gmail.com"; + github = "patryk4815"; + githubId = 3074260; + name = "Patryk Sondej"; + }; patternspandemic = { email = "patternspandemic@live.com"; github = "patternspandemic"; diff --git a/pkgs/tools/admin/kics/default.nix b/pkgs/tools/admin/kics/default.nix new file mode 100644 index 000000000000..c6cc5db40278 --- /dev/null +++ b/pkgs/tools/admin/kics/default.nix @@ -0,0 +1,37 @@ +{ stdenv, buildGoModule, fetchFromGitHub, lib }: + +buildGoModule rec { + pname = "kics"; + version = "1.5.12"; + + src = fetchFromGitHub { + owner = "Checkmarx"; + repo = "kics"; + rev = "v${version}"; + sha256 = "sha256-jHspStyjq5T9jzYDRYaf2gOI4F/X+h4nDn0PFUOHoBY="; + }; + + vendorSha256 = "sha256-q5NuuP04kOoLVj210s17fIW2cxrsC/tAyET8YYGai0M="; + + subPackages = [ "cmd/console" ]; + + postInstall = '' + mv $out/bin/console $out/bin/kics + ''; + + ldflags = [ + "-s" "-w" + "-X github.com/Checkmarx/kics/internal/constant.SCMCommits=${version}" + "-X github.com/Checkmarx/kics/internal/constants.Version=${version}" + ]; + + meta = with lib; { + description = '' + Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development + cycle of your infrastructure-as-code with KICS by Checkmarx. + ''; + homepage = "https://github.com/Checkmarx/kics"; + license = licenses.asl20; + maintainers = with maintainers; [ patryk4815 ]; + }; +} diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix index aaf2fe0d66c9..6b19b4d67c60 100644 --- a/pkgs/top-level/all-packages.nix +++ b/pkgs/top-level/all-packages.nix @@ -5696,6 +5696,8 @@ with pkgs; ssh = openssh; }; + kics = callPackage ../tools/admin/kics { }; + kramdown-asciidoc = callPackage ../tools/typesetting/kramdown-asciidoc { }; lychee = callPackage ../tools/networking/lychee { };