Skip to content

make nixmeta.csv extensible #157

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
h0nIg opened this issue Mar 23, 2025 · 0 comments · May be fixed by #162
Open

make nixmeta.csv extensible #157

h0nIg opened this issue Mar 23, 2025 · 0 comments · May be fixed by #162

Comments

@h0nIg
Copy link

h0nIg commented Mar 23, 2025

Hi,

@henrirosten would it be possible to make nixmeta.csv customizable? We have custom derivations which are not published on nixpkgs, but we would still like them to get matched including metadata. A prominent example would be a custom terraform or custom ruby version, which is easily possible through mkTerraform or mkRuby constructors. Such custom versions are not gathered in the csv, since nixpkgs and default versions are scanned only.

https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/applications/networking/cluster/terraform/default.nix#L184
https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/interpreters/ruby/default.nix#L424

We would like to use nixtract to gather the data once per day (expensive operation, searching for derivations through nix eval and gathering meta elements). This data can then get converted into csv and should get referenced as metadata CSV:

_NIXMETA_CSV_URL = "https://github.com/henrirosten/nixmeta/raw/main/data/nixmeta.csv"

Thank you!

h0nIg added a commit to h0nIg/sbomnix that referenced this issue Apr 2, 2025
@h0nIg h0nIg linked a pull request Apr 2, 2025 that will close this issue
h0nIg added a commit to h0nIg/sbomnix that referenced this issue Apr 2, 2025
fixes: tiiuae#157
Signed-off-by: h0nIg <h0nIg@users.noreply.github.com>
@h0nIg h0nIg changed the title make nixmeta.csv overridable make nixmeta.csv extensible Apr 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant