bastionguard
maintainer specialworld83
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds from a git repository hosted on the project's own domain, which is normal for AUR packages; the non-whitelisted host is plausibly official, and the source is not a prebuilt executable or obfuscated payload, making the risk low despite the SKIP'd checksum.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a git repository hosted on the project's own domain, which is normal for AUR packages; the non-whitelisted host is plausibly official, and the source is not a prebuilt executable or obfuscated payload, making the risk low despite the SKIP'd checksum.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:61
"BastionGuard::git+https://git.bastionguard.eu/specialworld83/BastionGuard.git#tag=v${pkgver}"
PKGBUILD
1 offending line(s) highlighted
1
#
2
# BastionGuard™
3
# Copyright (C) 2025–2026 Calogero Scarnà
4
#
5
# This program is free software: you can redistribute it and/or modify
6
# it under the terms of the GNU General Public License as published by
7
# the Free Software Foundation, version 3.
8
#
9
# This program is distributed in the hope that it will be useful,
10
# but WITHOUT ANY WARRANTY; without even the implied warranty of
11
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12
# GNU General Public License for more details.
13
#
14
# You should have received a copy of the GNU General Public License
15
# along with this program. If not, see <https://www.gnu.org/licenses/>.
16
#
17
# BastionGuard™ is a trademark of Calogero Scarnà.
18
# The BastionGuard™ name and branding are not licensed under the GPL.
19
#
20
21
# Maintainer: BastionGuard info@bastionguard.eu
22
23
pkgname=bastionguard
24
pkgver=2.0.1
25
pkgrel=2
26
pkgdesc="BastionGuard - transparent security control plane for Linux desktops"
27
arch=('x86_64')
28
url="https://bastionguard.eu/"
29
license=('GPL-3.0-only')
30
# Documentation: https://bastionguard.eu/documentation/bastionguard-documentation/technical-documentation-application-install/installation-package/
31
32
depends=(
33
'glibc' 'gcc-libs'
34
# GUI toolkit (gtkmm-4.0 stack)
35
'gtkmm-4.0' 'gtk4' 'glib2' 'glibmm' 'pangomm-2.48' 'pango' 'cairomm' 'cairo'
36
'harfbuzz' 'gdk-pixbuf2' 'graphene' 'libsigc++-3.0'
37
# Core libraries used by the CMake targets
38
'boost-libs' 'boost' 'libsoup3' 'libsecret' 'curl' 'openssl' 'sqlite' 'libidn2'
39
're2' 'yara' 'polkit' 'systemd-libs' 'smbclient' 'nlohmann-json' 'sudo'
40
# CEF / Chromium runtime dependencies
41
'nss' 'nspr' 'libglvnd' 'vulkan-icd-loader' 'mesa' 'libdrm'
42
'alsa-lib' 'dbus' 'at-spi2-core'
43
'libxcomposite' 'libxdamage' 'libxrandr' 'libxfixes' 'libxkbcommon'
44
# Runtime bastionguard-backup (fork GTK4) + secure-connection
45
'vte4' 'vte3' 'libgee' 'json-glib' 'grpc' 'protobuf'
46
'libshumate' 'libnetfilter_queue' 'libbpf' 'help2man' 'libbpf' 'bcc-libbpf-tools' 'bpf' 'zstd' 'lzo'
47
# Runtime services / helpers
48
'nginx' 'php' 'clamav' 'dnsmasq' 'bubblewrap' 'rsync'
49
)
50
51
makedepends=(
52
'cmake' 'pkgconf' 'gettext' 'python'
53
'meson' 'ninja' 'mm-common' 'cargo-c' 'hyperscan'
54
# bastionguard-backup (Vala/Meson) + secure-connection (Meson, eBPF)
55
'vala' 'go' 'clang'
56
)
57
58
options=('strip')
59
60
source=(
61
"BastionGuard::git+https://git.bastionguard.eu/specialworld83/BastionGuard.git#tag=v${pkgver}"
62
)
63
64
sha256sums=('SKIP')
65
66
_srcname="BastionGuard"
67
68
prepare() {
69
cd "$srcdir/$_srcname"
70
71
# Sostituisce il CMake generico con quello specifico per Arch Linux
72
cp -f \
73
pkgbuild/cmake_archlinux/CMakeLists.txt \
74
CMakeLists.txt
75
76
# Evita di riutilizzare una configurazione CMake precedente
77
rm -rf build
78
}
79
80
build() {
81
cd "$srcdir/$_srcname"
82
83
cmake -S . -B build \
84
-DCMAKE_BUILD_TYPE=Release \
85
-DCMAKE_INSTALL_PREFIX=/usr \
86
-DCMAKE_INSTALL_SYSCONFDIR=/etc \
87
-DBG_PACKAGING=ON \
88
-DBG_DEBIAN_NO_INSTALL_CODE=ON \
89
-DENABLE_SYSTEMD_SERVICES=OFF \
90
-DENABLE_USER_AGENT_AUTO=OFF \
91
-DINSTALL_NGINX_DEFAULTS=OFF \
92
-DBASTIONGUARD_INIT_SYSTEM=AUTO \
93
94
cmake --build build -- -j1
95
}
96
97
package() {
98
cd "$srcdir/$_srcname"
99
DESTDIR="$pkgdir" cmake --install build
100
install -dm750 "$pkgdir"/var/lib/bastionguard-webui/{cache,quarantine,sessions,tmp}
101
install -dm755 "$pkgdir/var/log/bastionguard-webui"
102
}
103
Changes since previous scan
--- PKGBUILD @ 2026-07-25 00:13+++ PKGBUILD @ 2026-08-03 00:08@@ -21,7 +21,7 @@ # Maintainer: BastionGuard info@bastionguard.eu pkgname=bastionguard-pkgver=2.0+pkgver=2.0.1 pkgrel=2 pkgdesc="BastionGuard - transparent security control plane for Linux desktops" arch=('x86_64')Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 3 |
| 2026-07-28 00:07:28 | LOW | 3 |
| 2026-07-27 21:35:42 | MEDIUM | 2 |
| 2026-07-27 00:24:32 | LOW | 3 |
| 2026-07-26 00:07:32 | LOW | 3 |
| 2026-07-25 15:29:50 | MEDIUM | 2 |
| 2026-07-25 00:13:44 | LOW | 3 |
| 2026-07-24 00:02:28 | LOW | 3 |
| 2026-07-23 00:14:47 | LOW | 3 |
| 2026-07-22 00:29:32 | LOW | 3 |
| 2026-07-21 13:17:02 | MEDIUM | 2 |
| 2026-07-21 00:24:15 | LOW | 3 |
| 2026-07-20 00:19:49 | LOW | 3 |
| 2026-07-19 00:17:08 | LOW | 3 |
| 2026-07-18 00:14:48 | LOW | 3 |