From 39d94a8cf8ad49101e73db695c1369a791fec427 Mon Sep 17 00:00:00 2001
From: Christoph Hollizeck <christoph.hollizeck@hey.com>
Date: Tue, 27 Oct 2026 19:01:25 +0100
Subject: [PATCH] nix: add a CPE for hey-cli

adding this helps avoid confusion when scanning for CVEs affecting the system

CVE-2018-13730 is for cpe:2.3:a:hey_project:hey:-:*:*:*:*:*:*:*
that has nothing to do with hey-cli.
---
 nix/package.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nix/package.nix b/nix/package.nix
index 99d5eced..a7158d61 100644
--- a/nix/package.nix
+++ b/nix/package.nix
@@ -43,5 +43,8 @@ buildGoModule.override { inherit go; } (finalAttrs: {
     changelog = "https://github.com/basecamp/hey-cli/releases/tag/v${finalAttrs.version}";
     license = lib.licenses.mit;
     mainProgram = "hey";
+    identifiers.cpeParts = lib.meta.cpeFullVersionWithVendor "basecamp" finalAttrs.version // {
+      product = "hey-cli";
+    };
   };
 })