summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Gerbet <thomas@gerbet.me>2022-01-31 20:21:43 +0100
committerzowoq <59103226+zowoq@users.noreply.github.com>2022-02-01 20:34:48 +1000
commitfabcd012ee2e0540a7b9498eb61d5e6094b98541 (patch)
tree82a7ba35231cdecefd64bb57d44ffc85f05249ec
parentdbmate: update vendorSha256 (diff)
downloadnixpkgs-fabcd012ee2e0540a7b9498eb61d5e6094b98541.tar.gz
cosign: 1.5.0 -> 1.5.1
https://github.com/sigstore/cosign/releases/tag/v1.5.1
-rw-r--r--pkgs/tools/security/cosign/default.nix9
1 files changed, 6 insertions, 3 deletions
diff --git a/pkgs/tools/security/cosign/default.nix b/pkgs/tools/security/cosign/default.nix
index fbbd26dea684..54beab643a80 100644
--- a/pkgs/tools/security/cosign/default.nix
+++ b/pkgs/tools/security/cosign/default.nix
@@ -2,13 +2,13 @@
buildGoModule rec {
pname = "cosign";
- version = "1.5.0";
+ version = "1.5.1";
src = fetchFromGitHub {
owner = "sigstore";
repo = pname;
rev = "v${version}";
- sha256 = "sha256-mxDLF9DQKySDR1c7jD/D0/xI+/R8a/ZlukliT/R4wCg=";
+ sha256 = "sha256-hQFkbHOmtk0SqFSPw1+5nCvjq9cKsGzFPtK4jXDrubQ=";
};
buildInputs = lib.optional (stdenv.isLinux && pivKeySupport) (lib.getDev pcsclite)
@@ -16,7 +16,7 @@ buildGoModule rec {
nativeBuildInputs = [ pkg-config installShellFiles ];
- vendorSha256 = "sha256-xqwwvVGXWFFKKBtH4a/+akFSlZ2hCOC1v1sO0d2p9fs=";
+ vendorSha256 = "sha256-d3aOX4iMlhlxgYbqCHCIFKXunVha0Fw4ZBmy4OA6EhI=";
excludedPackages = "\\(sample\\|webhook\\|help\\)";
@@ -26,6 +26,9 @@ buildGoModule rec {
postPatch = ''
rm pkg/cosign/tuf/client_test.go # Require network access
+ rm internal/pkg/cosign/fulcio/signer_test.go # Require network access
+ rm internal/pkg/cosign/rekor/signer_test.go # Require network access
+ rm pkg/cosign/kubernetes/webhook/validator_test.go # Require network access
'';
postInstall = ''