kube-bench: 0.15.0 -> 0.16.0

[r-ryantm]

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://repology.org/project/kube-bench/versions.

meta.description for kube-bench is: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

meta.homepage for kube-bench is: https://github.com/aquasecurity/kube-bench

meta.changelog for kube-bench is: https://github.com/aquasecurity/kube-bench/releases/tag/v0.15.1

Updates performed

• Golang update

To inspect upstream changes

Impact

Checks done

---

• built on NixOS
• The tests defined in passthru.tests, if any, passed
• found 0.15.1 with grep in /nix/store/2qnbiprwdpyripkb3hpmc07fsmyk66hp-kube-bench-0.15.1
• found 0.15.1 in filename of file in /nix/store/2qnbiprwdpyripkb3hpmc07fsmyk66hp-kube-bench-0.15.1

---

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

kube-bench

Instructions to test this update (click to expand)

---

Either download from the cache:

nix-store -r /nix/store/2qnbiprwdpyripkb3hpmc07fsmyk66hp-kube-bench-0.15.1 \
  --option binary-caches 'https://cache.nixos.org/ https://nixpkgs-update-cache.nix-community.org/' \
  --option trusted-public-keys '
  nixpkgs-update-cache.nix-community.org-1:U8d6wiQecHUPJFSqHN9GSSmNkmdiFW7GW7WNAnHW0SM=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A kube-bench https://github.com/r-ryantm/nixpkgs/archive/de5f9f1a9a73afbb82f03798ec19a6882d077c6c.tar.gz

Or:

nix build github:r-ryantm/nixpkgs/de5f9f1a9a73afbb82f03798ec19a6882d077c6c#kube-bench

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/2qnbiprwdpyripkb3hpmc07fsmyk66hp-kube-bench-0.15.1
ls -la /nix/store/2qnbiprwdpyripkb3hpmc07fsmyk66hp-kube-bench-0.15.1/bin

---

Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review --extra-nixpkgs-config '{ allowBroken = false; }'
Commit: de5f9f1a9a73afbb82f03798ec19a6882d077c6c

---

x86_64-linux

✅ 1 package built:

• kube-bench

---

Maintainer pings

cc @06kellyjac for testing.

Tip

As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

[r-ryantm]

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/aquasecurity/kube-bench/releases.

meta.description for kube-bench is: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

meta.homepage for kube-bench is: https://github.com/aquasecurity/kube-bench

meta.changelog for kube-bench is: https://github.com/aquasecurity/kube-bench/releases/tag/v0.15.4

Updates performed

• Golang update

To inspect upstream changes

Impact

Checks done

---

• built on NixOS
• The tests defined in passthru.tests, if any, passed
• found 0.15.4 with grep in /nix/store/ayk1y84vlaasgj43sv3ic0xlwjjj9sw8-kube-bench-0.15.4
• found 0.15.4 in filename of file in /nix/store/ayk1y84vlaasgj43sv3ic0xlwjjj9sw8-kube-bench-0.15.4

---

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

kube-bench

Instructions to test this update (click to expand)

---

Either download from the cache:

nix-store -r /nix/store/ayk1y84vlaasgj43sv3ic0xlwjjj9sw8-kube-bench-0.15.4 \
  --option binary-caches 'https://cache.nixos.org/ https://nixpkgs-update-cache.nix-community.org/' \
  --option trusted-public-keys '
  nixpkgs-update-cache.nix-community.org-1:U8d6wiQecHUPJFSqHN9GSSmNkmdiFW7GW7WNAnHW0SM=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A kube-bench https://github.com/r-ryantm/nixpkgs/archive/2619f991c87c9129be307a0e3223a61b2a986ce3.tar.gz

Or:

nix build github:r-ryantm/nixpkgs/2619f991c87c9129be307a0e3223a61b2a986ce3#kube-bench

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/ayk1y84vlaasgj43sv3ic0xlwjjj9sw8-kube-bench-0.15.4
ls -la /nix/store/ayk1y84vlaasgj43sv3ic0xlwjjj9sw8-kube-bench-0.15.4/bin

---

Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review --extra-nixpkgs-config '{ allowBroken = false; }'
Commit: 2619f991c87c9129be307a0e3223a61b2a986ce3

---

x86_64-linux

✅ 1 package built:

• kube-bench

---

Maintainer pings

cc @06kellyjac for testing.

Tip

As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

[r-ryantm]

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/aquasecurity/kube-bench/releases.

meta.description for kube-bench is: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

meta.homepage for kube-bench is: https://github.com/aquasecurity/kube-bench

meta.changelog for kube-bench is: https://github.com/aquasecurity/kube-bench/releases/tag/v0.15.5

Updates performed

• Golang update

To inspect upstream changes

Impact

Checks done

---

• built on NixOS
• The tests defined in passthru.tests, if any, passed
• found 0.15.5 with grep in /nix/store/g12giw5vmwnn7h50di5v6drrqwv99qxz-kube-bench-0.15.5
• found 0.15.5 in filename of file in /nix/store/g12giw5vmwnn7h50di5v6drrqwv99qxz-kube-bench-0.15.5

---

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

kube-bench

Instructions to test this update (click to expand)

---

Either download from the cache:

nix-store -r /nix/store/g12giw5vmwnn7h50di5v6drrqwv99qxz-kube-bench-0.15.5 \
  --option binary-caches 'https://cache.nixos.org/ https://nixpkgs-update-cache.nix-community.org/' \
  --option trusted-public-keys '
  nixpkgs-update-cache.nix-community.org-1:U8d6wiQecHUPJFSqHN9GSSmNkmdiFW7GW7WNAnHW0SM=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A kube-bench https://github.com/r-ryantm/nixpkgs/archive/8f6e3f5d3d18b3c26ef2a9fac5a54ef0dec7b94e.tar.gz

Or:

nix build github:r-ryantm/nixpkgs/8f6e3f5d3d18b3c26ef2a9fac5a54ef0dec7b94e#kube-bench

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/g12giw5vmwnn7h50di5v6drrqwv99qxz-kube-bench-0.15.5
ls -la /nix/store/g12giw5vmwnn7h50di5v6drrqwv99qxz-kube-bench-0.15.5/bin

---

Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review --extra-nixpkgs-config '{ allowBroken = false; }'
Commit: 8f6e3f5d3d18b3c26ef2a9fac5a54ef0dec7b94e

---

x86_64-linux

✅ 1 package built:

• kube-bench

---

Maintainer pings

cc @06kellyjac for testing.

Tip

As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

[r-ryantm]

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/aquasecurity/kube-bench/releases.

meta.description for kube-bench is: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

meta.homepage for kube-bench is: https://github.com/aquasecurity/kube-bench

meta.changelog for kube-bench is: https://github.com/aquasecurity/kube-bench/releases/tag/v0.15.6

Updates performed

• Golang update

To inspect upstream changes

Impact

Checks done

---

• built on NixOS
• The tests defined in passthru.tests, if any, passed
• found 0.15.6 with grep in /nix/store/jy6h7gab7hs1rsqmd0vzsym2s5f9rpc0-kube-bench-0.15.6
• found 0.15.6 in filename of file in /nix/store/jy6h7gab7hs1rsqmd0vzsym2s5f9rpc0-kube-bench-0.15.6

---

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

kube-bench

Instructions to test this update (click to expand)

---

Either download from the cache:

nix-store -r /nix/store/jy6h7gab7hs1rsqmd0vzsym2s5f9rpc0-kube-bench-0.15.6 \
  --option binary-caches 'https://cache.nixos.org/ https://nixpkgs-update-cache.nix-community.org/' \
  --option trusted-public-keys '
  nixpkgs-update-cache.nix-community.org-1:U8d6wiQecHUPJFSqHN9GSSmNkmdiFW7GW7WNAnHW0SM=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A kube-bench https://github.com/r-ryantm/nixpkgs/archive/191497e509e2bad8beff151a1f0abff7c520a5e0.tar.gz

Or:

nix build github:r-ryantm/nixpkgs/191497e509e2bad8beff151a1f0abff7c520a5e0#kube-bench

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/jy6h7gab7hs1rsqmd0vzsym2s5f9rpc0-kube-bench-0.15.6
ls -la /nix/store/jy6h7gab7hs1rsqmd0vzsym2s5f9rpc0-kube-bench-0.15.6/bin

---

Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review --extra-nixpkgs-config '{ allowBroken = false; }'
Commit: 191497e509e2bad8beff151a1f0abff7c520a5e0

---

x86_64-linux

✅ 1 package built:

• kube-bench

---

Maintainer pings

cc @06kellyjac for testing.

Tip

As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

[r-ryantm]

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/aquasecurity/kube-bench/releases.

meta.description for kube-bench is: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

meta.homepage for kube-bench is: https://github.com/aquasecurity/kube-bench

meta.changelog for kube-bench is: https://github.com/aquasecurity/kube-bench/releases/tag/v0.16.0

Updates performed

• Golang update

To inspect upstream changes

Impact

Checks done

---

• built on NixOS
• The tests defined in passthru.tests, if any, passed
• found 0.16.0 with grep in /nix/store/d47rypxg3pavdvsl5yw3kfa2k6rc5sv1-kube-bench-0.16.0
• found 0.16.0 in filename of file in /nix/store/d47rypxg3pavdvsl5yw3kfa2k6rc5sv1-kube-bench-0.16.0

---

Rebuild report (if merged into master) (click to expand)

5 total rebuild path(s)

3 package rebuild(s)

First fifty rebuilds by attrpath

kube-bench
tests.config-nix-unit

Instructions to test this update (click to expand)

---

Either download from the cache:

nix-store -r /nix/store/d47rypxg3pavdvsl5yw3kfa2k6rc5sv1-kube-bench-0.16.0 \
  --option binary-caches 'https://cache.nixos.org/ https://nixpkgs-update-cache.nix-community.org/' \
  --option trusted-public-keys '
  nixpkgs-update-cache.nix-community.org-1:U8d6wiQecHUPJFSqHN9GSSmNkmdiFW7GW7WNAnHW0SM=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The nixpkgs-update cache is only trusted for this store-path realization.)
For the cached download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.

Or, build yourself:

nix-build -A kube-bench https://github.com/r-ryantm/nixpkgs/archive/eb25ec921fa9a05ed1c270c8018ac72020fce537.tar.gz

Or:

nix build github:r-ryantm/nixpkgs/eb25ec921fa9a05ed1c270c8018ac72020fce537#kube-bench

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/d47rypxg3pavdvsl5yw3kfa2k6rc5sv1-kube-bench-0.16.0
ls -la /nix/store/d47rypxg3pavdvsl5yw3kfa2k6rc5sv1-kube-bench-0.16.0/bin

---

Pre-merge build results

We have automatically built all packages that will get rebuilt due to
this change.

This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review --extra-nixpkgs-config '{ allowBroken = false; }'
Commit: eb25ec921fa9a05ed1c270c8018ac72020fce537

---

x86_64-linux

✅ 2 packages built:

• kube-bench
• tests.config-nix-unit

---

Maintainer pings

cc @06kellyjac for testing.

Tip

As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.