nixos/tests/blint: init

Signed-off-by: Ethan Carter Edwards <ethan@ethancedwards.com>

nixos/tests/all-tests.nix

@@ -273,6 +273,7 @@ in
   bitbox-bridge = runTest ./bitbox-bridge.nix;
   bitcoind = runTest ./bitcoind.nix;
   bittorrent = runTest ./bittorrent.nix;
+  blint = runTest ./blint.nix;
   blockbook-frontend = runTest ./blockbook-frontend.nix;
   blocky = runTest ./blocky.nix;
   bookstack = runTest ./bookstack.nix;

nixos/tests/blint.nix

@@ -0,0 +1,30 @@
+{
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  name = "owasp blint test";
+
+  meta.maintainers = with lib; [
+    maintainers.ethancedwards8
+    teams.ngi
+  ];
+
+  nodes.machine = {
+    environment.systemPackages = with pkgs; [
+      blint
+      jq
+    ];
+  };
+
+  testScript =
+    { nodes, ... }:
+    ''
+      start_all()
+
+      machine.succeed('blint -i ${lib.getExe pkgs.ripgrep} -o /tmp/ripgrep')
+      machine.succeed('jq . /tmp/ripgrep/*.json')
+    '';
+}

pkgs/by-name/bl/blint/package.nix

@@ -3,6 +3,7 @@
   python3Packages,
   fetchFromGitHub,
   versionCheckHook,
+  nixosTests,
 }:
 
 python3Packages.buildPythonApplication rec {
@@ -57,6 +58,8 @@ python3Packages.buildPythonApplication rec {
     "test_demangle"
   ];
 
+  passthru.tests = { inherit (nixosTests) blint; };
+
   meta = {
     description = "Binary Linter to check the security properties, and capabilities in executables";
     homepage = "https://github.com/owasp-dep-scan/blint";