trufflehog/trufflehog.spec

56 lines
1.5 KiB
RPMSpec
Raw Normal View History

#
# spec file for package trufflehog
#
Accepting request 1139765 from home:ph03nix - Update to version 3.63.10: * [chore] - Add regex and keyword for api_org tokens (#2240) * Assume unauthenticated github scans have public visibility (#2308) * [fixup ] - Allow ssh cloning with AWS Code Commit (#2307) * added azure protos (#2304) * Disable recently added postgres detector because it it too sensitive (#2303) * [feat] - Provide CLI flag to only use custom verifiers (#2299) * Individuate archive tests #2293 * [feat] - Allow for the use of include/exclude path files for filesystem scans (#2297) * [chore] - small updates (#2288) * fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.9.0 (#2295) * fix(deps): update module github.com/aws/aws-sdk-go to v1.49.19 (#2294) * feat(installation): Implement checksum signature verification (#2157) * fix(deps): update module github.com/aws/aws-sdk-go to v1.49.18 (#2292) * fix(deps): update module cloud.google.com/go/storage to v1.36.0 (#2291) * chore(deps): update sigstore/cosign-installer action to v3.3.0 (#2290) * chore(deps): update alpine docker tag to v3.19 (#2287) * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.19 (#2286) * Extend memory cache (#2275) * fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.3 (#2285) * fix(deps): update golang.org/x/exp digest to 0dcbfd6 (#2284) * fix(deps): update module github.com/azuread/microsoft-authentication-library-for-go to v1.2.1 (#2282) * adding postgres detector (#2108) * update test (#2283) * fix(deps): update golang.org/x/exp digest to be819d1 (#2281) * fix(signable): ignore common false positives (#2230) * fix(parseur): ignore false positives (#2229) * [chore] - update docs for pre-commit (#2280) * 1833 Fix syslog udp (#1835) * Wrap temp deletion err #2277 OBS-URL: https://build.opensuse.org/request/show/1139765 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=42
2024-01-18 17:09:58 +00:00
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
Name: trufflehog
Accepting request 1162849 from home:ph03nix - Update to version 3.71.1: * Use Lstat to identify non-regular files in filesystem source (#2628) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.8 (#2630) * [bugfix] - Update the Anthropic detector (#2629) * fix(deps): update module github.com/charmbracelet/glamour to v0.7.0 (#2627) * fix(deps): update module github.com/go-sql-driver/mysql to v1.8.1 (#2626) * Fix incorrect regular expression with missing closing bracket (#2616) * fix(deps): update golang.org/x/exp digest to a685a6e (#2621) * [chore] - upgrade dep (#2618) * Fix additional GitHub test errors #2614 * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.7 (#2623) - Update to version 3.71.0: * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.6 (#2615) * fix(deps): update module github.com/xanzy/go-gitlab to v0.101.0 (#2617) * fix(github): resolve panic & test failures (#2608) * Dockerhub v2 detector (#2361) * fix(deps): update module github.com/brianvoe/gofakeit/v6 to v7 (#2612) * Update Snyk detector (#2559) * MaxMind detector uses the right endpoint (#2577) * feat(gitparse): avoid uneeded calls to strconv.Unquote (#2605) * fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.10.0 (#2607) * fix(deps): update module google.golang.org/api to v0.171.0 (#2611) * fix(deps): update module github.com/brianvoe/gofakeit/v6 to v7 (#2524) * fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 (#2590) * Use go 1.22 (#2599) * Refactor GitHub source (#2379) * Bump github.com/docker/docker (#2603) * [chore] Fix potential resource leak in postman source (#2606) * strings contain keyword check, add collection name to keywords (#2602) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.4 (#2604) * Postman Source (#2579) OBS-URL: https://build.opensuse.org/request/show/1162849 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=83
2024-03-27 12:01:09 +00:00
Version: 3.71.1
Release: 0
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
Summary: CLI tool to find exposed secrets in source and archives
License: AGPL-3.0-or-later
URL: https://github.com/trufflesecurity/trufflehog
Source: trufflehog-%{version}.tar.gz
Source1: vendor.tar.gz
Accepting request 1162849 from home:ph03nix - Update to version 3.71.1: * Use Lstat to identify non-regular files in filesystem source (#2628) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.8 (#2630) * [bugfix] - Update the Anthropic detector (#2629) * fix(deps): update module github.com/charmbracelet/glamour to v0.7.0 (#2627) * fix(deps): update module github.com/go-sql-driver/mysql to v1.8.1 (#2626) * Fix incorrect regular expression with missing closing bracket (#2616) * fix(deps): update golang.org/x/exp digest to a685a6e (#2621) * [chore] - upgrade dep (#2618) * Fix additional GitHub test errors #2614 * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.7 (#2623) - Update to version 3.71.0: * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.6 (#2615) * fix(deps): update module github.com/xanzy/go-gitlab to v0.101.0 (#2617) * fix(github): resolve panic & test failures (#2608) * Dockerhub v2 detector (#2361) * fix(deps): update module github.com/brianvoe/gofakeit/v6 to v7 (#2612) * Update Snyk detector (#2559) * MaxMind detector uses the right endpoint (#2577) * feat(gitparse): avoid uneeded calls to strconv.Unquote (#2605) * fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.10.0 (#2607) * fix(deps): update module google.golang.org/api to v0.171.0 (#2611) * fix(deps): update module github.com/brianvoe/gofakeit/v6 to v7 (#2524) * fix(deps): update module github.com/launchdarkly/go-server-sdk/v6 to v7 (#2590) * Use go 1.22 (#2599) * Refactor GitHub source (#2379) * Bump github.com/docker/docker (#2603) * [chore] Fix potential resource leak in postman source (#2606) * strings contain keyword check, add collection name to keywords (#2602) * fix(deps): update module github.com/aws/aws-sdk-go to v1.51.4 (#2604) * Postman Source (#2579) OBS-URL: https://build.opensuse.org/request/show/1162849 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=83
2024-03-27 12:01:09 +00:00
BuildRequires: golang(API) >= 1.22
%description
TruffleHog is a scanning engine that helps find exposed secrets
within e.g. GitHub/GitLab repos, AWS S3 buckets, GCS buckets,
Docker images, Circle CI/Travis CI setups, or in individual files.
%prep
%autosetup -D -a 1
%build
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
%ifnarch ppc64
export GOFLAGS="-buildmode=pie"
%endif
go build
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
%check
# execute the binary as a basic check
./%{name} --help
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
%install
install -D -m 0755 %{name} %{buildroot}%{_bindir}/%{name}
%files
%doc README.md
%license LICENSE
Accepting request 1121212 from home:jfkw:branches:devel:languages:go - Packaging improvement: * _service change disabled to manual per osc deprecation warning: WARNING: Command 'disabledrun/dr' is obsolete, please convert your _service to use 'manual' and then 'manualrun/mr' instead. * _service reorder move set_version earlier so go_modules sees updated version * Summary and Description clarify the purpose of this CLI tool * Use %%name macro where applicable to normalize common lines across Go app packages. Also makes renaming binary easier when required to handle package name conflict. * Drop BuildRequires: libpcre1. libpcre2 is already included during build, and there is no mention in upstream source or docs that only libpcre1 is supported. Since upstream uses CGO_ENABLED=0 in their Makefile, it is not clear if or how libpcre would be a required dependency. * Drop BuildRequires: golang-packaging. The original macros for file movements into GOPATH are obsolete with Go modules. Macro go_nostrip is no longer needed with current binutils and Go. * Remove %%{go_nostrip} macro which is no longer recommended * Extract go build command from upstream Makefile. The go build command straightforward in this package. Calling go build directly from packaging where possible helps package maintainers review usage and normalize packaging standards. * Build PIE with pattern that may become recommended procedure: %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build A go toolchain buildmode default config would be preferable but none exist at this time. * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable * Drop export CGO_ENABLED="0" used by Makefile. Use the default unless there is a defined requirement or benefit. OBS-URL: https://build.opensuse.org/request/show/1121212 OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/trufflehog?expand=0&rev=25
2023-10-30 15:10:34 +00:00
%{_bindir}/%{name}
%changelog