@@ -0,0 +1,41 @@
1+{ lib, fetchFromGitHub, coccinelle, gnugrep, python3Packages }:
2+
3+with python3Packages;
4+
5+buildPythonApplication rec {
6+ pname = "cvehound";
7+ version = "1.0.4";
8+
9+ src = fetchFromGitHub {
10+ owner = "evdenis";
11+ repo = "cvehound";
12+ rev = version;
13+ sha256 = "sha256-m8vpea02flQ8elSvGWv9FqBhsEcBzRYjcUk+dc4kb2M=";
14+ };
15+
16+ makeWrapperArgs = [
17+ "--prefix PATH : ${lib.makeBinPath [ coccinelle gnugrep ]}"
18+ ];
19+
20+ propagatedBuildInputs = [
21+ psutil
22+ setuptools
23+ sympy
24+ ];
25+
26+ checkInputs = [
27+ GitPython
28+ pytestCheckHook
29+ ];
30+
31+ # Tries to clone the kernel sources
32+ doCheck = false;
33+
34+ meta = with lib; {
35+ description = "tool to check linux kernel source dump for known CVEs";
36+ homepage = "https://github.com/evdenis/cvehound";
37+ # See https://github.com/evdenis/cvehound/issues/22
38+ license = with licenses; [ gpl2Only gpl3Only ];
39+ maintainers = with maintainers; [ ambroisie ];
40+ };
41+}