From 934b565dd7f7b90ac3b996c64f1270dc0eb13896 Mon Sep 17 00:00:00 2001
From: Fabian Affolter <mail@fabian-affolter.ch>
Date: Sun, 7 Aug 2022 19:29:15 +0200
Subject: [PATCH] sigma-cli: 0.4.3 -> 0.5.0

---
 pkgs/tools/security/sigma-cli/default.nix | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/pkgs/tools/security/sigma-cli/default.nix b/pkgs/tools/security/sigma-cli/default.nix
index 5a3ed90a4182..8b10d6412d1c 100644
--- a/pkgs/tools/security/sigma-cli/default.nix
+++ b/pkgs/tools/security/sigma-cli/default.nix
@@ -5,14 +5,14 @@
 
 python3.pkgs.buildPythonApplication rec {
   pname = "sigma-cli";
-  version = "0.4.3";
+  version = "0.5.0";
   format = "pyproject";
 
   src = fetchFromGitHub {
     owner = "SigmaHQ";
     repo = pname;
     rev = "refs/tags/v${version}";
-    hash = "sha256-3LFakeS3aQaacm7HqeAJPMJhi3Wf8zbJc//SEWUA1Rg=";
+    hash = "sha256-i0rin4TLoqo+F2nWG4kcFp3x/cRtkMzAo5Ldyo0Si5w=";
   };
 
   nativeBuildInputs = with python3.pkgs; [
@@ -23,8 +23,11 @@ python3.pkgs.buildPythonApplication rec {
     click
     prettytable
     pysigma
-    pysigma-backend-splunk
+    pysigma-backend-elasticsearch
     pysigma-backend-insightidr
+    pysigma-backend-opensearch
+    pysigma-backend-qradar
+    pysigma-backend-splunk
     pysigma-pipeline-crowdstrike
     pysigma-pipeline-sysmon
     pysigma-pipeline-windows
@@ -37,7 +40,7 @@ python3.pkgs.buildPythonApplication rec {
   postPatch = ''
     substituteInPlace pyproject.toml \
       --replace 'prettytable = "^3.1.1"' 'prettytable = "*"' \
-      --replace 'pysigma = "^0.5.0"' 'pysigma = "*"'
+      --replace 'pysigma = "^0.7.2"' 'pysigma = "*"'
   '';
 
   pythonImportsCheck = [