rework: fix all vulnerabilities

2026-09-08 10:36:38 +00:00
parent 01a0d6e00a
commit 6f80f672f2
17 changed files with 62 additions and 73 deletions
@@ -1,12 +1,15 @@
-{ lib, writeShellScriptBin, fetchFromGitHub, pkgs }: let
+{ lib, fetchFromGitHub, runCommand, makeWrapper, jq }: let
  src = fetchFromGitHub {
    owner = "nativerv";
    repo = "slpt";
    rev = "8d70db4d8dfcd624ed49b9e6fb0ad449b6f25b89";
    hash = "sha256-sCHZsf7Y36iAesh7BeSxy9WhE/uQv13/VWmjlaVSEcU=";
  };
-in writeShellScriptBin "slpt" ''
-  #!${pkgs.runtimeShell}
-  PATH=${lib.makeBinPath [ pkgs.jq ]}:$PATH
-  ${builtins.readFile "${src}/slpt"}
+in runCommand "slpt" {
+  inherit src;
+  nativeBuildInputs = [ makeWrapper ];
+} ''
+  install -Dm755 "$src/slpt" "$out/bin/slpt"
+  patchShebangs "$out/bin/slpt"
+  wrapProgram "$out/bin/slpt" --prefix PATH : "${lib.makeBinPath [ jq ]}"
 ''