atomgit-cli-git
LOW
maintainer moyigeek
1 votes
scanned 2026-10-17 00:21:55.226236
Why flagged
The source is a Git repository from the project's own domain (atomgit.com), which is plausibly the official project host; building from source is normal for AUR packages, and no unverifiable or executable payloads are downloaded.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Git repository from the project's own domain (atomgit.com), which is plausibly the official project host; building from source is normal for AUR packages, and no unverifiable or executable payloads are downloaded.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=("${_pkgname}::git+https://atomgit.com/hust-open-atom-club/atomgit-cli.git")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: moyigeek <moyi@openatom.club>
2
3
pkgname=atomgit-cli-git
4
_pkgname=atomgit-cli
5
pkgver=0.7.4.r5.gc6d9b9f
6
pkgrel=1
7
pkgdesc="AtomGit CLI (ag-cli) - 基于 AtomGit API 的命令行工具，参考 GitHub CLI (gh) 开发 (git version)"
8
arch=('x86_64' 'aarch64' 'loong64')
9
url="https://atomgit.com/hust-open-atom-club/atomgit-cli"
10
license=('custom:MulanPSL-2.0')
11
depends=('glibc')
12
makedepends=('go' 'git')
13
provides=('ag-cli')
14
conflicts=('ag' 'ag-bin' 'ag-cli' 'ag-cli-bin' 'atomgit-cli' 'atomgit-cli-bin')
15
source=("${_pkgname}::git+https://atomgit.com/hust-open-atom-club/atomgit-cli.git")
16
sha256sums=('SKIP')
17
18
pkgver() {
19
cd "${srcdir}/${_pkgname}"
20
git describe --long --tags | sed 's/^v//; s/\([^-]*-g\)/r\1/; s/-/./g'
21
}
22
23
build() {
24
cd "${srcdir}/${_pkgname}"
25
export CGO_ENABLED=0
26
local _commit _builddate
27
_commit="$(git rev-parse --short=12 HEAD)"
28
_builddate="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
29
go build -trimpath -o ag-cli \
30
-ldflags "-s -w \
31
-X atomgit.com/hust-open-atom-club/atomgit-cli/internal/version.Version=v${pkgver} \
32
-X atomgit.com/hust-open-atom-club/atomgit-cli/internal/version.Commit=${_commit} \
33
-X atomgit.com/hust-open-atom-club/atomgit-cli/internal/version.BuildDate=${_builddate}" \
34
./cmd/ag-cli
35
36
go run ./scripts/generate-manpages --output "${srcdir}/man/man1"
37
}
38
39
package() {
40
cd "${srcdir}/${_pkgname}"
41
install -Dm755 "ag-cli" "${pkgdir}/usr/bin/ag-cli"
42
install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
43
install -Dm644 "${srcdir}/man/man1/"*.1 -t "${pkgdir}/usr/share/man/man1/"
44
}
Changes since previous scan
--- PKGBUILD @ 2026-08-22 03:18+++ PKGBUILD @ 2026-10-17 00:21@@ -2,16 +2,16 @@ pkgname=atomgit-cli-git _pkgname=atomgit-cli-pkgver=0.7.2.r27.gdb67692+pkgver=0.7.4.r5.gc6d9b9f pkgrel=1-pkgdesc="AtomGit CLI (ag) - 基于 AtomGit API 的命令行工具，参考 GitHub CLI (gh) 开发 (git version)"+pkgdesc="AtomGit CLI (ag-cli) - 基于 AtomGit API 的命令行工具，参考 GitHub CLI (gh) 开发 (git version)" arch=('x86_64' 'aarch64' 'loong64') url="https://atomgit.com/hust-open-atom-club/atomgit-cli" license=('custom:MulanPSL-2.0') depends=('glibc') makedepends=('go' 'git')-provides=('ag')-conflicts=('ag' 'ag-bin' 'atomgit-cli' 'atomgit-cli-bin')+provides=('ag-cli')+conflicts=('ag' 'ag-bin' 'ag-cli' 'ag-cli-bin' 'atomgit-cli' 'atomgit-cli-bin') source=("${_pkgname}::git+https://atomgit.com/hust-open-atom-club/atomgit-cli.git") sha256sums=('SKIP') @@ -26,16 +26,19 @@ local _commit _builddate _commit="$(git rev-parse --short=12 HEAD)" _builddate="$(date -u +%Y-%m-%dT%H:%M:%SZ)"- go build -trimpath -o ag \+ go build -trimpath -o ag-cli \ -ldflags "-s -w \ -X atomgit.com/hust-open-atom-club/atomgit-cli/internal/version.Version=v${pkgver} \ -X atomgit.com/hust-open-atom-club/atomgit-cli/internal/version.Commit=${_commit} \ -X atomgit.com/hust-open-atom-club/atomgit-cli/internal/version.BuildDate=${_builddate}" \- ./cmd/ag+ ./cmd/ag-cli++ go run ./scripts/generate-manpages --output "${srcdir}/man/man1" } package() { cd "${srcdir}/${_pkgname}"- install -Dm755 "ag" "${pkgdir}/usr/bin/ag"+ install -Dm755 "ag-cli" "${pkgdir}/usr/bin/ag-cli" install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"+ install -Dm644 "${srcdir}/man/man1/"*.1 -t "${pkgdir}/usr/share/man/man1/" }Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 03:12:20 | Medium | 1 |
| 2026-08-22 03:18:22 | Clean | 3 |
| 2026-08-22 03:16:42 | Medium | 2 |