tailsnitch: init at 1.4.0
This commit is contained in:
@@ -0,0 +1,42 @@
|
||||
{
|
||||
lib,
|
||||
buildGoModule,
|
||||
fetchFromGitHub,
|
||||
versionCheckHook,
|
||||
}:
|
||||
buildGoModule (finalAttrs: {
|
||||
pname = "tailsnitch";
|
||||
version = "1.4.0";
|
||||
|
||||
src = fetchFromGitHub {
|
||||
owner = "Adversis";
|
||||
repo = "tailsnitch";
|
||||
tag = "v${finalAttrs.version}";
|
||||
hash = "sha256-LvAOIDM1YIB4LmOm6zXrzr5SOH7tyF4t79XCLDg6p2Q=";
|
||||
};
|
||||
|
||||
vendorHash = "sha256-khw9K4sKhubhkccoC4f923Aw2Cj9eKpVqLHZICdkTXw=";
|
||||
|
||||
ldflags = [
|
||||
"-w"
|
||||
"-s"
|
||||
"-X=github.com/Adversis/tailsnitch/cmd.Version=${finalAttrs.version}"
|
||||
"-X=github.com/Adversis/tailsnitch/cmd.BuildID=${finalAttrs.version}"
|
||||
"-X=github.com/Adversis/tailsnitch/cmd.BuildDate=1970-01-01T00:00:00Z"
|
||||
];
|
||||
|
||||
doInstallCheck = true;
|
||||
nativeInstallCheckInputs = [ versionCheckHook ];
|
||||
versionCheckProgramArg = "--version";
|
||||
|
||||
meta = {
|
||||
homepage = "https://github.com/Adversis/tailsnitch";
|
||||
changelog = "https://github.com/Adversis/tailsnitch/releases/tag/v${finalAttrs.version}";
|
||||
description = "Security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best practice violations";
|
||||
mainProgram = "tailsnitch";
|
||||
license = lib.licenses.mit;
|
||||
maintainers = with lib.maintainers; [
|
||||
yethal
|
||||
];
|
||||
};
|
||||
})
|
||||
Reference in New Issue
Block a user