bastionguard
LOW
maintainer specialworld83
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a git checkout from the project's own domain, which is plausibly official; building from a non-whitelisted host is normal for AUR packages and not inherently dangerous.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git checkout from the project's own domain, which is plausibly official; building from a non-whitelisted host is normal for AUR packages and not inherently dangerous.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:61
"BastionGuard::git+https://git.bastionguard.eu/specialworld83/BastionGuard.git#tag=v${pkgver}"
PKGBUILD
1 offending line(s) highlighted
1
#
2
# BastionGuard™
3
# Copyright (C) 2025–2026 Calogero Scarnà
4
#
5
# This program is free software: you can redistribute it and/or modify
6
# it under the terms of the GNU General Public License as published by
7
# the Free Software Foundation, version 3.
8
#
9
# This program is distributed in the hope that it will be useful,
10
# but WITHOUT ANY WARRANTY; without even the implied warranty of
11
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
# GNU General Public License for more details.
13
#
14
# You should have received a copy of the GNU General Public License
15
# along with this program. If not, see <https://www.gnu.org/licenses/>.
16
#
17
# BastionGuard™ is a trademark of Calogero Scarnà.
18
# The BastionGuard™ name and branding are not licensed under the GPL.
19
#
20
21
# Maintainer: BastionGuard info@bastionguard.eu
22
23
pkgname=bastionguard
24
pkgver=2.0.2
25
pkgrel=1
26
pkgdesc="BastionGuard - transparent security control plane for Linux desktops"
27
arch=('x86_64')
28
url="https://bastionguard.eu/"
29
license=('GPL-3.0-only')
30
# Documentation: https://bastionguard.eu/documentation/bastionguard-documentation/technical-documentation-application-install/installation-package/
31
32
depends=(
33
'glibc' 'gcc-libs'
34
# GUI toolkit (gtkmm-4.0 stack)
35
'gtkmm-4.0' 'gtk4' 'glib2' 'glibmm' 'pangomm-2.48' 'pango' 'cairomm' 'cairo'
36
'harfbuzz' 'gdk-pixbuf2' 'graphene' 'libsigc++-3.0'
37
# Core libraries used by the CMake targets
38
'boost-libs' 'boost' 'libsoup3' 'libsecret' 'curl' 'openssl' 'sqlite' 'libidn2'
39
're2' 'yara' 'polkit' 'systemd-libs' 'smbclient' 'nlohmann-json' 'sudo'
40
# CEF / Chromium runtime dependencies
41
'nss' 'nspr' 'libglvnd' 'vulkan-icd-loader' 'mesa' 'libdrm'
42
'alsa-lib' 'dbus' 'at-spi2-core'
43
'libxcomposite' 'libxdamage' 'libxrandr' 'libxfixes' 'libxkbcommon'
44
# Runtime bastionguard-backup (fork GTK4) + secure-connection
45
'vte4' 'vte3' 'libgee' 'json-glib' 'grpc' 'protobuf'
46
'libshumate' 'libnetfilter_queue' 'libbpf' 'help2man' 'libbpf' 'bcc-libbpf-tools' 'bpf' 'zstd' 'lzo'
47
# Runtime services / helpers
48
'nginx' 'php' 'clamav' 'dnsmasq' 'bubblewrap' 'rsync'
49
)
50
51
makedepends=(
52
'cmake' 'pkgconf' 'gettext' 'python'
53
'meson' 'ninja' 'mm-common' 'cargo-c' 'hyperscan'
54
# bastionguard-backup (Vala/Meson) + secure-connection (Meson, eBPF)
55
'vala' 'go' 'clang'
56
)
57
58
options=('strip')
59
60
source=(
61
"BastionGuard::git+https://git.bastionguard.eu/specialworld83/BastionGuard.git#tag=v${pkgver}"
62
)
63
64
sha256sums=('SKIP')
65
66
_srcname="BastionGuard"
67
68
prepare() {
69
cd "$srcdir/$_srcname"
70
71
# Sostituisce il CMake generico con quello specifico per Arch Linux
72
cp -f \
73
pkgbuild/cmake_archlinux/CMakeLists.txt \
74
CMakeLists.txt
75
76
# Evita di riutilizzare una configurazione CMake precedente
77
rm -rf build
78
}
79
80
build() {
81
cd "$srcdir/$_srcname"
82
83
cmake -S . -B build \
84
-DCMAKE_BUILD_TYPE=Release \
85
-DCMAKE_INSTALL_PREFIX=/usr \
86
-DCMAKE_INSTALL_SYSCONFDIR=/etc \
87
-DBG_PACKAGING=ON \
88
-DBG_DEBIAN_NO_INSTALL_CODE=ON \
89
-DENABLE_SYSTEMD_SERVICES=OFF \
90
-DENABLE_USER_AGENT_AUTO=OFF \
91
-DINSTALL_NGINX_DEFAULTS=OFF \
92
-DBASTIONGUARD_INIT_SYSTEM=AUTO \
93
94
cmake --build build -- -j1
95
}
96
97
package() {
98
cd "$srcdir/$_srcname"
99
DESTDIR="$pkgdir" cmake --install build
100
install -dm750 "$pkgdir"/var/lib/bastionguard-webui/{cache,quarantine,sessions,tmp}
101
install -dm755 "$pkgdir/var/log/bastionguard-webui"
102
}
103
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |