1password-cli

MEDIUM
maintainer slurpee 58 votes scanned 2026-10-28 01:49:03.400007
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source_x86_64=("https://cache.agilebits.com/dist/1P/op2/pkg/v${pkgver}/op_linux_amd64_v${pkgver}.zip")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: slurpee <aur@lylat.io>
2# Contributors: Felix Seidel, Claudia Pellegrino, Liu Yuxuan
3
4pkgname=1password-cli
5pkgver=2.41.1
6pkgrel=1
7pkgdesc="1Password command line tool"
8arch=('x86_64' 'i686' 'arm' 'armv6h' 'aarch64')
9url="https://app-updates.agilebits.com/product_history/CLI2"
10license=('custom')
11options=('!strip' '!emptydirs')
12install=${pkgname}.install
13validpgpkeys=('3FEF9748469ADBE15DA7CA80AC2D62742012EA22')
14
15source_x86_64=("https://cache.agilebits.com/dist/1P/op2/pkg/v${pkgver}/op_linux_amd64_v${pkgver}.zip")
16source_i686=("https://cache.agilebits.com/dist/1P/op2/pkg/v${pkgver}/op_linux_386_v${pkgver}.zip")
17source_arm=("https://cache.agilebits.com/dist/1P/op2/pkg/v${pkgver}/op_linux_arm_v${pkgver}.zip")
18source_armv6h=("${source_arm}")
19source_aarch64=("https://cache.agilebits.com/dist/1P/op2/pkg/v${pkgver}/op_linux_arm64_v${pkgver}.zip")
20
21sha256sums_x86_64=('e52476700cba9202ac7469bdfb2648ecdbf3438ac85822010f77230139e74966')
22sha256sums_i686=('44466d01f22541da5bb5168b72741c31ae229241f427bfeead2c82b972abefb3')
23sha256sums_arm=('9486d0b0d5719af95197ec7e47693321f7767fff84f67f04eb4184c184f62ee7')
24sha256sums_armv6h=("${sha256sums_arm}")
25sha256sums_aarch64=('89abd60c17d5c614066c20e6abed816449eb018c5e0679ed63d57071c7bee85e')
26
27check() {
28 if (( ! SKIPPGPCHECK )); then
29 gpg --verify ${srcdir}/op.sig ${srcdir}/op
30 fi
31}
32
33package() {
34 install -Dm755 op "${pkgdir}"/usr/bin/op
35}
36
37# vim:set ts=2 sw=2 et:
38

Changes since previous scan

--- PKGBUILD @ 2026-10-14 00:06
+++ PKGBUILD @ 2026-10-28 01:49
@@ -2,7 +2,7 @@
# Contributors: Felix Seidel, Claudia Pellegrino, Liu Yuxuan
pkgname=1password-cli
-pkgver=2.40.0
+pkgver=2.41.1
pkgrel=1
pkgdesc="1Password command line tool"
arch=('x86_64' 'i686' 'arm' 'armv6h' 'aarch64')
@@ -18,11 +18,11 @@
source_armv6h=("${source_arm}")
source_aarch64=("https://cache.agilebits.com/dist/1P/op2/pkg/v${pkgver}/op_linux_arm64_v${pkgver}.zip")
-sha256sums_x86_64=('74277219e8da60958c00f9aee9d2023225e98fdda8bfd2156a5d9e85e0edaab3')
-sha256sums_i686=('adb1da45c0a40bb97c1e1ad62119d0a1aeb4ed9d979c06a7b1f95a48d9142b3d')
-sha256sums_arm=('cb9a2e938b542eac668e847bf555293549ad6ecc014216c99a66f1348728e354')
+sha256sums_x86_64=('e52476700cba9202ac7469bdfb2648ecdbf3438ac85822010f77230139e74966')
+sha256sums_i686=('44466d01f22541da5bb5168b72741c31ae229241f427bfeead2c82b972abefb3')
+sha256sums_arm=('9486d0b0d5719af95197ec7e47693321f7767fff84f67f04eb4184c184f62ee7')
sha256sums_armv6h=("${sha256sums_arm}")
-sha256sums_aarch64=('0e8ac99ee93d661aa725dc24a5ef8bf344741d224064a5dfb469dc689faec86a')
+sha256sums_aarch64=('89abd60c17d5c614066c20e6abed816449eb018c5e0679ed63d57071c7bee85e')
check() {
if (( ! SKIPPGPCHECK )); then

Scan history

Scanned at (UTC)SeverityRules
2026-10-28 01:49:03 Medium 1
2026-10-14 00:06:47 Clean 2
2026-10-13 05:15:42 Medium 1
2026-08-20 00:05:13 Clean 2
2026-08-19 21:42:23 Medium 1
2026-07-27 00:24:32 Clean 2
2026-07-26 01:31:24 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 18:55:24 Low 2
2026-06-18 18:04:49 Low 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion