authentik-sysd-bin
LOW
maintainer jonathanio
0 votes
base
authentik-platform-bin
scanned 2026-11-01 00:21:48.120785
Why flagged
The package downloads prebuilt .deb files from the project's official domain (pkg.goauthentik.io), which is plausibly controlled by the software vendor; these are unpacked and installed without executing remote code, representing a normal binary package distribution method, not a supply-chain risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt .deb files from the project's official domain (pkg.goauthentik.io), which is plausibly controlled by the software vendor; these are unpacked and installed without executing remote code, representing a normal binary package distribution method, not a supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
source_x86_64=("authentik-agent.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent/authentik-agent_${pkgver}_amd64.deb"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Jonathan Wright <jon@than.io>
2
# Built upon authentik-platform-git PKGBUILD by Matt Cuneo <m@cuneu.au>
3
4
pkgbase="authentik-platform-bin"
5
pkgdesc='authentik Platform authentication, Agent, CLI and other components'
6
pkgname=('authentik-cli-bin'
7
'authentik-agent-bin'
8
'authentik-agent-desktop-bin'
9
'authentik-sysd-bin'
10
'libpam-authentik-bin'
11
'libnss-authentik-bin')
12
pkgver=0.72.5
13
pkgrel=1
14
url="https://github.com/goauthentik/platform"
15
license=('MIT')
16
makedepends=()
17
arch=('x86_64'
18
'aarch64')
19
options=('!strip')
20
21
source=('authentik-nss.install'
22
'authentik-pam.install'
23
'authentik-sysd.install')
24
source_x86_64=("authentik-agent.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent/authentik-agent_${pkgver}_amd64.deb"
25
"authentik-agent-desktop.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent-desktop/authentik-agent-desktop_${pkgver}_amd64.deb"
26
"authentik-cli.deb::https://pkg.goauthentik.io/pool/main/a/authentik-cli/authentik-cli_${pkgver}_amd64.deb"
27
"authentik-sysd.deb::https://pkg.goauthentik.io/pool/main/a/authentik-sysd/authentik-sysd_${pkgver}_amd64.deb"
28
"libnss-authentik.deb::https://pkg.goauthentik.io/pool/main/libn/libnss-authentik/libnss-authentik_${pkgver}_amd64.deb"
29
"libpam-authentik.deb::https://pkg.goauthentik.io/pool/main/libp/libpam-authentik/libpam-authentik_${pkgver}_amd64.deb")
30
31
source_aarch64=("authentik-agent.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent/authentik-agent_${pkgver}_arm64.deb"
32
"authentik-agent-desktop.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent-desktop/authentik-agent-desktop_${pkgver}_arm64.deb"
33
"authentik-cli.deb::https://pkg.goauthentik.io/pool/main/a/authentik-cli/authentik-cli_${pkgver}_arm64.deb"
34
"authentik-sysd.deb::https://pkg.goauthentik.io/pool/main/a/authentik-sysd/authentik-sysd_${pkgver}_arm64.deb"
35
"libnss-authentik.deb::https://pkg.goauthentik.io/pool/main/libn/libnss-authentik/libnss-authentik_${pkgver}_arm64.deb"
36
"libpam-authentik.deb::https://pkg.goauthentik.io/pool/main/libp/libpam-authentik/libpam-authentik_${pkgver}_arm64.deb")
37
38
sha256sums=('16e52ff7d18c8aa97edc8f0b06da0ac0f45f4a87ca0ce3a8cf700b5477cfaf57'
39
'1db5d2f9fb1d5d6e5f9cca34e58f1b3b9f55e161d478c76198a4889dfca9fada'
40
'ce6e0895be72586d3944c2b1efdffc3ee16d9e8897690a07f44be733d19b77cf')
41
sha256sums_x86_64=('a92aa6ac6e1aebec8ef153646d948fcf1e942d39954ce27a555a360028e5e822'
42
'4fca2c836fa5df3003c584d520ae92559adef39dfce94a2d0902059ed244eef2'
43
'85596b4230abd3d679fb7761481fb8d537c7d0af9025c179c780d6c775f88137'
44
'ae7227e6e0dec73335395977ea46fc1c552d81a47d417622e43a64bd0f190b74'
45
'b6a26f5d0c8c242bbfde2d5bf69028fb153ca8af56bc1bf2d7fa7a8f108c61f0'
46
'251cbd7b59c8e6bfb0b2e38e756ec083c2d60d63f39dc70fabc69b604935344d')
47
sha256sums_aarch64=('a92aa6ac6e1aebec8ef153646d948fcf1e942d39954ce27a555a360028e5e822'
48
'4fca2c836fa5df3003c584d520ae92559adef39dfce94a2d0902059ed244eef2'
49
'85596b4230abd3d679fb7761481fb8d537c7d0af9025c179c780d6c775f88137'
50
'ae7227e6e0dec73335395977ea46fc1c552d81a47d417622e43a64bd0f190b74'
51
'b6a26f5d0c8c242bbfde2d5bf69028fb153ca8af56bc1bf2d7fa7a8f108c61f0'
52
'251cbd7b59c8e6bfb0b2e38e756ec083c2d60d63f39dc70fabc69b604935344d')
53
54
noextract=('authentik-agent.deb'
55
'authentik-agent-desktop.deb'
56
'authentik-cli.deb'
57
'authentik-sysd.deb'
58
'libnss-authentik.deb'
59
'libpam-authentik.deb')
60
61
prepare() {
62
true # Do nothing
63
}
64
65
package_authentik-sysd-bin() {
66
pkgdesc="authentik System Agent"
67
provides=(authentik-sysd)
68
conflicts=(authentik-sysd)
69
backup=(etc/authentik/config.json)
70
install=authentik-sysd.install
71
72
optdepends=(
73
'libnss-authentik: Make the system aware of Authentik users'
74
'libpam-authentik: Allow logging in as an Authentik user'
75
)
76
77
bsdtar -O -xf "authentik-sysd.deb" data.tar.gz | bsdtar -C "${pkgdir}" -xf -
78
}
79
80
package_authentik-agent-bin() {
81
pkgdesc="authentik Agent"
82
provides=(authentik-agent)
83
conflicts=(authentik-agent)
84
depends=(authentik-sysd authentik-cli)
85
86
bsdtar -O -xf "authentik-agent.deb" data.tar.gz | bsdtar -C "${pkgdir}" -xf -
87
}
88
89
package_authentik-agent-desktop-bin() {
90
pkgdesc="authentik Agent (Desktop)"
91
provides=(authentik-agent)
92
conflicts=(authentik-agent)
93
depends=(authentik-sysd authentik-cli webkit2gtk-4.1 gtk3 libappindicator)
94
95
bsdtar -O -xf "authentik-agent-desktop.deb" data.tar.gz | bsdtar -C "${pkgdir}" -xf -
96
}
97
98
package_authentik-cli-bin() {
99
pkgdesc="authentik CLI"
100
provides=(authentik-cli)
101
conflicts=(authentik-cli)
102
depends=(authentik-agent authentik-sysd)
103
104
bsdtar -O -xf "authentik-cli.deb" data.tar.gz | bsdtar -C "${pkgdir}" -xf -
105
}
106
107
package_libnss-authentik-bin() {
108
depends=(authentik-sysd)
109
provides=(libnss-authentik)
110
conflicts=(libnss-authentik authentik-nss)
111
pkgdesc="Authentik NSS module that makes the system aware of Authentik users"
112
install=authentik-nss.install
113
114
bsdtar -O -xf "libnss-authentik.deb" data.tar.gz | bsdtar -C "${pkgdir}" -xf -
115
}
116
117
package_libpam-authentik-bin() {
118
depends=(authentik-sysd)
119
provides=(libpam-authentik)
120
conflicts=(libpam-authentik authentik-pam)
121
pkgdesc="Authentik PAM module to enable logging in with Authentik credentials"
122
install=authentik-pam.install
123
124
bsdtar -O -xf "libnss-authentik.deb" data.tar.gz | bsdtar -C "${pkgdir}" -xf -
125
}
126
Changes since previous scan
--- PKGBUILD @ 2026-10-29 00:13+++ PKGBUILD @ 2026-11-01 00:21@@ -5,10 +5,11 @@ pkgdesc='authentik Platform authentication, Agent, CLI and other components' pkgname=('authentik-cli-bin' 'authentik-agent-bin' + 'authentik-agent-desktop-bin' 'authentik-sysd-bin' 'libpam-authentik-bin' 'libnss-authentik-bin')-pkgver=0.72.1+pkgver=0.72.5 pkgrel=1 url="https://github.com/goauthentik/platform" license=('MIT')@@ -21,12 +22,14 @@ 'authentik-pam.install' 'authentik-sysd.install') source_x86_64=("authentik-agent.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent/authentik-agent_${pkgver}_amd64.deb"+ "authentik-agent-desktop.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent-desktop/authentik-agent-desktop_${pkgver}_amd64.deb" "authentik-cli.deb::https://pkg.goauthentik.io/pool/main/a/authentik-cli/authentik-cli_${pkgver}_amd64.deb" "authentik-sysd.deb::https://pkg.goauthentik.io/pool/main/a/authentik-sysd/authentik-sysd_${pkgver}_amd64.deb" "libnss-authentik.deb::https://pkg.goauthentik.io/pool/main/libn/libnss-authentik/libnss-authentik_${pkgver}_amd64.deb" "libpam-authentik.deb::https://pkg.goauthentik.io/pool/main/libp/libpam-authentik/libpam-authentik_${pkgver}_amd64.deb") source_aarch64=("authentik-agent.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent/authentik-agent_${pkgver}_arm64.deb"+ "authentik-agent-desktop.deb::https://pkg.goauthentik.io/pool/main/a/authentik-agent-desktop/authentik-agent-desktop_${pkgver}_arm64.deb" "authentik-cli.deb::https://pkg.goauthentik.io/pool/main/a/authentik-cli/authentik-cli_${pkgver}_arm64.deb" "authentik-sysd.deb::https://pkg.goauthentik.io/pool/main/a/authentik-sysd/authentik-sysd_${pkgver}_arm64.deb" "libnss-authentik.deb::https://pkg.goauthentik.io/pool/main/libn/libnss-authentik/libnss-authentik_${pkgver}_arm64.deb"@@ -35,18 +38,21 @@ sha256sums=('16e52ff7d18c8aa97edc8f0b06da0ac0f45f4a87ca0ce3a8cf700b5477cfaf57' '1db5d2f9fb1d5d6e5f9cca34e58f1b3b9f55e161d478c76198a4889dfca9fada' 'ce6e0895be72586d3944c2b1efdffc3ee16d9e8897690a07f44be733d19b77cf')-sha256sums_x86_64=('8addaff7f9e913911fc7efc3b065553d05d0e898a62e6d6ce213950a4942056a'- '746dc23ab7e785f093081667ba0a137948ebd13410f43075f3a5b751e491bf97'- 'bb83912f2d8d09d22641c0f1122e48afc23ce820ea2b844b50436e0f121ee7e7'- '323bf9ddcc15d27d78dadc2d16bebcf957bad1b84de3cea1b05b4756c062ba0a'- 'b0f0d4adee1a9a524d33dadfc062d0afe4d684d69a9fb98970a13e9d5b973d4a')-sha256sums_aarch64=('8addaff7f9e913911fc7efc3b065553d05d0e898a62e6d6ce213950a4942056a'- '746dc23ab7e785f093081667ba0a137948ebd13410f43075f3a5b751e491bf97'- 'bb83912f2d8d09d22641c0f1122e48afc23ce820ea2b844b50436e0f121ee7e7'- '323bf9ddcc15d27d78dadc2d16bebcf957bad1b84de3cea1b05b4756c062ba0a'- 'b0f0d4adee1a9a524d33dadfc062d0afe4d684d69a9fb98970a13e9d5b973d4a')+sha256sums_x86_64=('a92aa6ac6e1aebec8ef153646d948fcf1e942d39954ce27a555a360028e5e822'+ '4fca2c836fa5df3003c584d520ae92559adef39dfce94a2d0902059ed244eef2'+ '85596b4230abd3d679fb7761481fb8d537c7d0af9025c179c780d6c775f88137'+ 'ae7227e6e0dec73335395977ea46fc1c552d81a47d417622e43a64bd0f190b74'+ 'b6a26f5d0c8c242bbfde2d5bf69028fb153ca8af56bc1bf2d7fa7a8f108c61f0'+ '251cbd7b59c8e6bfb0b2e38e756ec083c2d60d63f39dc70fabc69b604935344d')+sha256sums_aarch64=('a92aa6ac6e1aebec8ef153646d948fcf1e942d39954ce27a555a360028e5e822'+ '4fca2c836fa5df3003c584d520ae92559adef39dfce94a2d0902059ed244eef2'+ '85596b4230abd3d679fb7761481fb8d537c7d0af9025c179c780d6c775f88137'+ 'ae7227e6e0dec73335395977ea46fc1c552d81a47d417622e43a64bd0f190b74'+ 'b6a26f5d0c8c242bbfde2d5bf69028fb153ca8af56bc1bf2d7fa7a8f108c61f0'+ '251cbd7b59c8e6bfb0b2e38e756ec083c2d60d63f39dc70fabc69b604935344d') noextract=('authentik-agent.deb'+ 'authentik-agent-desktop.deb' 'authentik-cli.deb' 'authentik-sysd.deb' 'libnss-authentik.deb'@@ -80,6 +86,15 @@ bsdtar -O -xf "authentik-agent.deb" data.tar.gz | bsdtar -C "${pkgdir}" -xf - } +package_authentik-agent-desktop-bin() {+ pkgdesc="authentik Agent (Desktop)"+ provides=(authentik-agent)+ conflicts=(authentik-agent)+ depends=(authentik-sysd authentik-cli webkit2gtk-4.1 gtk3 libappindicator)++ bsdtar -O -xf "authentik-agent-desktop.deb" data.tar.gz | bsdtar -C "${pkgdir}" -xf -+}+ package_authentik-cli-bin() { pkgdesc="authentik CLI" provides=(authentik-cli)Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 17:53:05 | Medium | 1 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 21:38:30 | Medium | 1 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 23:36:19 | Medium | 1 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |