kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/flawfinder/Makefile

23 lines
652 B
Makefile
Raw Normal View History

Revbump packages with a runtime Python dep but no version prefix. For the Python 3.8 default switch.
2020-12-04 21:44:57 +01:00
# $NetBSD: Makefile,v 1.28 2020/12/04 20:45:39 nia Exp $
Initial import of flawfinder-1.20. flawfinder is a program that examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
2002-07-14 15:02:23 +02:00
(pkgsrc) - Add LICENSE= gnu-gpl-v2 (upstream) - Update 1.27 to 1.31 ---------------------- 2014-08-03 David A. Wheeler <dwheeler, at, dwheeler.com> * Release version 1.31, a set of small improvements mostly CWE-related. * Note that flawfinder is officially CWE-compatible. * Support GNU make install conventions (prefix, bindir, DESTDIR, etc.). The older program-specific conventions are still supported, but the documentation emphasizes using the standard conventions instead. * Simplified installation text. * Added more wide character function rules. * Add reference to info at "http://www.dwheeler.com/secure-programs". * Document that hitlists should be trusted to be loaded or diffed. These are implented using Python's pickle module, and that module presumes the data is from a trustworthy source. In the expected use case this is fine... but it needed to be documented. * Tweak/improve mappings to CWE. E.G., strlen() better maps to CWE-126 (buffer over-read). In a few cases the CWE mappings weren't reported as such; that is now fixed. CWEs are actually a hierarchy; expose a little of this so people can more easily search on them. * Improved error detection and reporting. In particular, error messages are sent to standard errors, filenames listed but non-existent trigger a separate warning, and there's a warning about non-existent filenames listed on the command line that begin with the UTF-8 long dash sequence (users might not notice the difference between long dash and dash, and this can happen in some cases when copying and pasting). * Add "-H" option as synonym for "--html". 2014-07-19 David A. Wheeler <dwheeler, at, dwheeler.com> * Release 1.29, primarily for CWE improvements. * Multi-line formatting is faster and formats better. * Documentation about CWEs has been improved. * HTML format includes links from CWE identifiers to their definitions. * Tweak CWE mappings, e.g., strlen maps to CWE-126 (buffer over-read). * Option "--listrules" now gives default warning and is tab-delimited. * Regression test suite now also tests the generated HTML. 2014-07-13 David A. Wheeler <dwheeler, at, dwheeler.com> * Release 1.28 * Common Weakness Enumeration (CWE) references are now included in most hits * Handle files not ending in newline (thanks to Alexis Wilke) * Documentation clarifications * Added support for "git diff" in patchfile processing * Handles unbalanced double-quotes in sprintf * Fix incorrect time executed report * Fix bug to allow "flawfinder ." (fix bug#3) * Fix ignore directive when filenames differ (fix bug#6)
2015-03-11 01:51:06 +01:00
DISTNAME= flawfinder-1.31
Revbump packages with a runtime Python dep but no version prefix. For the Python 3.8 default switch.
2020-12-04 21:44:57 +01:00
PKGREVISION= 2
Initial import of flawfinder-1.20. flawfinder is a program that examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
2002-07-14 15:02:23 +02:00
CATEGORIES= security devel
Follow some http -> https redirects.
2017-08-01 16:58:51 +02:00
MASTER_SITES= https://www.dwheeler.com/flawfinder/
Initial import of flawfinder-1.20. flawfinder is a program that examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
2002-07-14 15:02:23 +02:00
Point MAINTAINER to pkgsrc-users@NetBSD.org in the case where no developer is officially maintaining the package. The rationale for changing this from "tech-pkg" to "pkgsrc-users" is that it implies that any user can try to maintain the package (by submitting patches to the mailing list). Since the folks most likely to care about the package are the folks that want to use it or are already using it, this would leverage the energy of users who aren't developers.
2006-03-04 22:28:51 +01:00
MAINTAINER= pkgsrc-users@NetBSD.org
Follow some http -> https redirects.
2017-08-01 16:58:51 +02:00
HOMEPAGE= https://www.dwheeler.com/flawfinder/
COMMENT should start with a capital letter.
2003-07-21 19:10:16 +02:00
COMMENT= Python program to find flaws in C/C++ programs
(pkgsrc) - Add LICENSE= gnu-gpl-v2 (upstream) - Update 1.27 to 1.31 ---------------------- 2014-08-03 David A. Wheeler <dwheeler, at, dwheeler.com> * Release version 1.31, a set of small improvements mostly CWE-related. * Note that flawfinder is officially CWE-compatible. * Support GNU make install conventions (prefix, bindir, DESTDIR, etc.). The older program-specific conventions are still supported, but the documentation emphasizes using the standard conventions instead. * Simplified installation text. * Added more wide character function rules. * Add reference to info at "http://www.dwheeler.com/secure-programs". * Document that hitlists should be trusted to be loaded or diffed. These are implented using Python's pickle module, and that module presumes the data is from a trustworthy source. In the expected use case this is fine... but it needed to be documented. * Tweak/improve mappings to CWE. E.G., strlen() better maps to CWE-126 (buffer over-read). In a few cases the CWE mappings weren't reported as such; that is now fixed. CWEs are actually a hierarchy; expose a little of this so people can more easily search on them. * Improved error detection and reporting. In particular, error messages are sent to standard errors, filenames listed but non-existent trigger a separate warning, and there's a warning about non-existent filenames listed on the command line that begin with the UTF-8 long dash sequence (users might not notice the difference between long dash and dash, and this can happen in some cases when copying and pasting). * Add "-H" option as synonym for "--html". 2014-07-19 David A. Wheeler <dwheeler, at, dwheeler.com> * Release 1.29, primarily for CWE improvements. * Multi-line formatting is faster and formats better. * Documentation about CWEs has been improved. * HTML format includes links from CWE identifiers to their definitions. * Tweak CWE mappings, e.g., strlen maps to CWE-126 (buffer over-read). * Option "--listrules" now gives default warning and is tab-delimited. * Regression test suite now also tests the generated HTML. 2014-07-13 David A. Wheeler <dwheeler, at, dwheeler.com> * Release 1.28 * Common Weakness Enumeration (CWE) references are now included in most hits * Handle files not ending in newline (thanks to Alexis Wilke) * Documentation clarifications * Added support for "git diff" in patchfile processing * Handles unbalanced double-quotes in sprintf * Fix incorrect time executed report * Fix bug to allow "flawfinder ." (fix bug#3) * Fix ignore directive when filenames differ (fix bug#6)
2015-03-11 01:51:06 +01:00
LICENSE= gnu-gpl-v2
Initial import of flawfinder-1.20. flawfinder is a program that examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
2002-07-14 15:02:23 +02:00
Fixed all pkglint warnings.
2006-02-15 14:43:35 +01:00
NO_BUILD= yes
security: align variable assignments pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-11-04 22:12:51 +01:00
REPLACE_PYTHON= flawfinder
Fixed PKGMANDIR.
2006-12-02 17:01:45 +01:00
INSTALLATION_DIRS= bin ${PKGMANDIR}/man1
Initial import of flawfinder-1.20. flawfinder is a program that examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
2002-07-14 15:02:23 +02:00
do-install:
DESTDIR support
2010-01-27 17:52:13 +01:00
${INSTALL_SCRIPT} ${WRKSRC}/flawfinder ${DESTDIR}${PREFIX}/bin
${INSTALL_MAN} ${WRKSRC}/flawfinder.1 ${DESTDIR}${PREFIX}/${PKGMANDIR}/man1
Initial import of flawfinder-1.20. flawfinder is a program that examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
2002-07-14 15:02:23 +02:00
Strip the ".buildlink" from the names of the python application and extension Makefile fragments, because they really don't have anything to do with the buildlink[12] frameworks. Change all the Makefiles that use application.buildlink.mk and extension.buildlink.mk to use application.mk and extension.mk instead.
2002-09-22 01:46:45 +02:00
.include "../../lang/python/application.mk"
Initial import of flawfinder-1.20. flawfinder is a program that examines source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
2002-07-14 15:02:23 +02:00
.include "../../mk/bsd.pkg.mk"
Reference in a new issue Copy permalink