From 2dcd55868b3e8fff37a3ceac10b6a823f7030ac9 Mon Sep 17 00:00:00 2001
From: Sergey Zhemoytel <djam5@ya.ru>
Date: Fri, 28 Jun 2024 09:57:23 +0000
Subject: [PATCH] 2.17.0

---
 .abf.yml       |  2 +-
 fastfetch.spec | 22 ++++++++++++++++++++--
 2 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/.abf.yml b/.abf.yml
index b228fb4..42f7dfa 100644
--- a/.abf.yml
+++ b/.abf.yml
@@ -1,2 +1,2 @@
 sources:
-  fastfetch-2.16.0.tar.gz: 88fc0b0daf5db5e32d01d061d7e25ddb17d9afbf
+  fastfetch-2.17.0.tar.gz: bbbefb51525ee031e41f15f5f32abd760b51bdba
diff --git a/fastfetch.spec b/fastfetch.spec
index 21e0ee7..15f1da8 100644
--- a/fastfetch.spec
+++ b/fastfetch.spec
@@ -1,5 +1,7 @@
+%define secscan 1
+
 Name:           fastfetch
-Version:        2.16.0
+Version:        2.17.0
 Release:        1
 Summary:        Like neofetch, but much faster because written in c
 Group:          Development/Other
@@ -45,7 +47,12 @@ Recommends:     glib2
 Recommends:     lib64opencl1
 Recommends:     chafa
 Recommends:     ddcutil
- 
+
+%if %{secscan}
+BuildRequires:  clamav
+BuildRequires:  trivy
+%endif
+
 %description
 fastfetch is a neofetch-like tool for fetching system information and
 displaying them in a pretty way. It is written in c to achieve much better
@@ -74,6 +81,11 @@ BuildArch: noarch
 %prep
 %setup -q
 
+%if %{secscan}
+clamscan -ir .
+trivy fs --scanners vuln --format cosign-vuln .
+%endif
+
 %build
 %cmake \
 %if %{mdvver} <= 201610
@@ -102,3 +114,9 @@ rm -rf %{buildroot}%{_datadir}/licenses/fastfetch/LICENSE
 
 %files fish-completion
 %{_datadir}/fish/vendor_completions.d/fastfetch.fish
+
+
+%check
+%if %{secscan}
+clamscan -ir %{buildroot}
+%endif