From e07a87da56919ff421ba5ea3c6aec09e7b3e2b62 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sat, 6 Jun 2026 20:19:09 +0200
Subject: [PATCH] cert-x-gen: init at 1.1.1

Polyglot execution engine and CLI for vulnerability detection using
real code

https://github.com/Bugb-Technologies/cert-x-gen
---
 pkgs/by-name/ce/cert-x-gen/package.nix | 58 ++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 pkgs/by-name/ce/cert-x-gen/package.nix

diff --git a/pkgs/by-name/ce/cert-x-gen/package.nix b/pkgs/by-name/ce/cert-x-gen/package.nix
new file mode 100644
index 000000000000..f34bbbe46596
--- /dev/null
+++ b/pkgs/by-name/ce/cert-x-gen/package.nix
@@ -0,0 +1,58 @@
+{
+  lib,
+  fetchFromGitHub,
+  libgit2,
+  openssl,
+  pkg-config,
+  rustPlatform,
+  versionCheckHook,
+  writableTmpDirAsHomeHook,
+  zlib,
+  zstd,
+}:
+
+rustPlatform.buildRustPackage (finalAttrs: {
+  pname = "cert-x-gen";
+  version = "1.1.1";
+
+  src = fetchFromGitHub {
+    owner = "Bugb-Technologies";
+    repo = "cert-x-gen";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-J3VPPOvBKitgtCi5h8LcXkcfFNciMKX0q8cQ/ytXncg=";
+  };
+
+  __structuredAttrs = true;
+
+  cargoHash = "sha256-ze5wLwwp2XdWQNEY+n+M6ZTYfw+QQZUR6V9/mgb32RI=";
+
+  nativeBuildInputs = [ pkg-config ];
+
+  buildInputs = [
+    libgit2
+    openssl
+    zlib
+    zstd
+  ];
+
+  nativeCheckInputs = [ writableTmpDirAsHomeHook ];
+
+  nativeInstallCheckInputs = [
+    versionCheckHook
+    writableTmpDirAsHomeHook
+  ];
+
+  env = {
+    OPENSSL_NO_VENDOR = true;
+    ZSTD_SYS_USE_PKG_CONFIG = true;
+  };
+
+  meta = {
+    description = "Polyglot execution engine and CLI for vulnerability detection using real code";
+    homepage = "https://github.com/Bugb-Technologies/cert-x-gen";
+    changelog = "https://github.com/Bugb-Technologies/cert-x-gen/blob/${finalAttrs.src.rev}/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "cxg";
+  };
+})