2021-01-23 13:26:19 +01:00
|
|
|
{ lib, stdenv
|
2019-12-11 15:21:22 +01:00
|
|
|
, fetchzip
|
|
|
|
|
, zlib
|
|
|
|
|
, xorg
|
|
|
|
|
, freetype
|
|
|
|
|
, alsaLib
|
|
|
|
|
, jdk11
|
|
|
|
|
, curl
|
|
|
|
|
, lttng-ust
|
|
|
|
|
, autoPatchelfHook
|
|
|
|
|
}:
|
|
|
|
|
|
|
|
|
|
stdenv.mkDerivation rec {
|
|
|
|
|
pname = "codeql";
|
2021-01-18 14:30:45 +01:00
|
|
|
version = "2.4.1";
|
2019-12-11 15:21:22 +01:00
|
|
|
|
|
|
|
|
dontConfigure = true;
|
|
|
|
|
dontBuild = true;
|
|
|
|
|
dontStrip = true;
|
|
|
|
|
|
|
|
|
|
src = fetchzip {
|
|
|
|
|
url = "https://github.com/github/codeql-cli-binaries/releases/download/v${version}/codeql.zip";
|
2021-01-18 14:30:45 +01:00
|
|
|
sha256 = "sha256-UHH+nV62jHvEY6T5UKz5cm9zse9pWHPAjjsGHfpPoPY=";
|
2019-12-11 15:21:22 +01:00
|
|
|
};
|
|
|
|
|
|
|
|
|
|
nativeBuildInputs = [
|
|
|
|
|
zlib
|
|
|
|
|
xorg.libX11
|
|
|
|
|
xorg.libXext
|
|
|
|
|
xorg.libXi
|
|
|
|
|
xorg.libXtst
|
|
|
|
|
xorg.libXrender
|
|
|
|
|
freetype
|
|
|
|
|
alsaLib
|
|
|
|
|
jdk11
|
|
|
|
|
stdenv.cc.cc.lib
|
|
|
|
|
curl
|
|
|
|
|
lttng-ust
|
|
|
|
|
autoPatchelfHook
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
installPhase = ''
|
|
|
|
|
# codeql directory should not be top-level, otherwise,
|
|
|
|
|
# it'll include /nix/store to resolve extractors.
|
|
|
|
|
mkdir -p $out/{codeql,bin}
|
|
|
|
|
cp -R * $out/codeql/
|
|
|
|
|
|
|
|
|
|
ln -sf $out/codeql/tools/linux64/lib64trace.so $out/codeql/tools/linux64/libtrace.so
|
|
|
|
|
|
|
|
|
|
sed -i 's;"$CODEQL_DIST/tools/$CODEQL_PLATFORM/java/bin/java";"${jdk11}/bin/java";' $out/codeql/codeql
|
|
|
|
|
|
|
|
|
|
ln -s $out/codeql/codeql $out/bin/
|
|
|
|
|
'';
|
|
|
|
|
|
2021-01-23 13:26:19 +01:00
|
|
|
meta = with lib; {
|
2019-12-11 15:21:22 +01:00
|
|
|
description = "Semantic code analysis engine";
|
|
|
|
|
homepage = "https://semmle.com/codeql";
|
|
|
|
|
maintainers = [ maintainers.dump_stack ];
|
|
|
|
|
license = licenses.unfree;
|
|
|
|
|
};
|
|
|
|
|
}
|
