Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

osv-scanner: 1.9.0 -> 1.9.1 #352967

Merged
merged 1 commit into from
Nov 2, 2024
Merged

Conversation

r-ryantm
Copy link
Contributor

@r-ryantm r-ryantm commented Nov 1, 2024

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/google/osv-scanner/releases.

meta.description for osv-scanner is: Vulnerability scanner written in Go which uses the data provided by https://osv.dev

meta.homepage for osv-scanner is: https://github.com/google/osv-scanner

meta.changelog for osv-scanner is: https://github.com/google/osv-scanner/releases/tag/v1.9.1

Updates performed
  • Golang update
To inspect upstream changes
Impact

Checks done


  • built on NixOS
  • The tests defined in passthru.tests, if any, passed
  • found 1.9.1 with grep in /nix/store/pjcn8hf7m591j66jxcyd9nvdfh72iccl-osv-scanner-1.9.1
  • found 1.9.1 in filename of file in /nix/store/pjcn8hf7m591j66jxcyd9nvdfh72iccl-osv-scanner-1.9.1

Rebuild report (if merged into master) (click to expand)
2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

osv-scanner
Instructions to test this update (click to expand)

Either download from Cachix:

nix-store -r /nix/store/pjcn8hf7m591j66jxcyd9nvdfh72iccl-osv-scanner-1.9.1 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A osv-scanner https://github.com/r-ryantm/nixpkgs/archive/cd2e893843b485a112280ffa156329f17ea4a533.tar.gz

Or:

nix build github:r-ryantm/nixpkgs/cd2e893843b485a112280ffa156329f17ea4a533#osv-scanner

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/pjcn8hf7m591j66jxcyd9nvdfh72iccl-osv-scanner-1.9.1
ls -la /nix/store/pjcn8hf7m591j66jxcyd9nvdfh72iccl-osv-scanner-1.9.1/bin


Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review


x86_64-linux

✅ 1 package built:
  • osv-scanner

Maintainer pings

cc @stehessel @urandom2 for testing.

Tip

As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.


Add a 👍 reaction to pull requests you find important.

@wegank wegank added 12.approved-by: package-maintainer This PR was reviewed and approved by a maintainer listed in the package 12.approvals: 1 This PR was reviewed and approved by one reputable person labels Nov 2, 2024
@wegank
Copy link
Member

wegank commented Nov 2, 2024

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review pr 352967


aarch64-darwin

✅ 1 package built:
  • osv-scanner

@wegank wegank merged commit 9b645c7 into NixOS:master Nov 2, 2024
33 of 34 checks passed
@r-ryantm r-ryantm deleted the auto-update/osv-scanner branch November 3, 2024 00:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
10.rebuild-darwin: 1-10 10.rebuild-darwin: 1 10.rebuild-linux: 1-10 10.rebuild-linux: 1 12.approvals: 1 This PR was reviewed and approved by one reputable person 12.approved-by: package-maintainer This PR was reviewed and approved by a maintainer listed in the package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants