From d565b70653cf52fbb74fbf2c35ed8c778ce7b43e Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Thu, 10 Jul 2025 13:52:34 +0200
Subject: [PATCH] cloudgoat: init at 2.3.0

AWS deployment tool for a vulnerable environment

https://github.com/RhinoSecurityLabs/cloudgoat
---
 pkgs/by-name/cl/cloudgoat/package.nix | 41 +++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 pkgs/by-name/cl/cloudgoat/package.nix

diff --git a/pkgs/by-name/cl/cloudgoat/package.nix b/pkgs/by-name/cl/cloudgoat/package.nix
new file mode 100644
index 000000000000..de5b138fb319
--- /dev/null
+++ b/pkgs/by-name/cl/cloudgoat/package.nix
@@ -0,0 +1,41 @@
+{
+  lib,
+  python3,
+  fetchFromGitHub,
+}:
+
+python3.pkgs.buildPythonApplication rec {
+  pname = "cloudgoat";
+  version = "2.3.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "RhinoSecurityLabs";
+    repo = "cloudgoat";
+    tag = "v${version}";
+    hash = "sha256-xDUDpdEluYKudrjIYOoQWNvF8BoC/VpSVdV5pzfLoMc=";
+  };
+
+  build-system = with python3.pkgs; [ poetry-core ];
+
+  dependencies = with python3.pkgs; [
+    argcomplete
+    boto3
+    pyyaml
+    requests
+    sqlite-utils
+  ];
+
+  nativeCheckInputs = with python3.pkgs; [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "cloudgoat" ];
+
+  meta = {
+    description = "AWS deployment tool for a vulnerable environment";
+    homepage = "https://github.com/RhinoSecurityLabs/cloudgoat";
+    changelog = "https://github.com/RhinoSecurityLabs/cloudgoat/releases/tag/${src.tag}";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "cloudgoat";
+  };
+}