bitcoin-knots
LOW
maintainer Retro_pex
1 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a signed tarball from the project's official domain, building from verified upstream code, with no execution of untrusted remote scripts or binaries.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a signed tarball from the project's official domain, building from verified upstream code, with no execution of untrusted remote scripts or binaries.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
source=("https://bitcoinknots.org/files/29.x/$pkgver/bitcoin-$pkgver.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Léo Haf <leo@haf.ovh>
2
pkgname=bitcoin-knots
3
pkgver=29.4.2.knots20260508
4
pkgrel=1
5
epoch=
6
pkgdesc="enhanced Bitcoin node/wallet software"
7
arch=(x86_64)
8
url="https://bitcoinknots.org"
9
license=('MIT')
10
groups=(bitcoin)
11
depends=('gcc-libs' 'sqlite' 'libevent' 'glibc')
12
makedepends=('boost' 'cmake')
13
checkdepends=('python3')
14
conflicts=('bitcoin')
15
backup=('etc/bitcoin/bitcoin.conf')
16
options=('!debug')
17
source=("https://bitcoinknots.org/files/29.x/$pkgver/bitcoin-$pkgver.tar.gz")
18
sha256sums=('11c0b99a82b8b1c9c29ab76d9b0507ce1017813665741627b3f3883a4c2f7a7f')
19
validpgpkeys=(
20
'DAED928C727D3E613EC46635F5073C4F4882FFFC' # Léo haf <leo@haf.ovh>
21
)
22
23
build() {
24
cd "bitcoin-$pkgver"
25
cmake -B build
26
cmake --build build -j "$(nproc)"
27
}
28
29
check() {
30
cd "bitcoin-$pkgver"
31
ctest --test-dir build
32
}
33
34
package() {
35
cd "bitcoin-$pkgver"
36
install -dm755 "${pkgdir}/usr/bin"
37
install -Dm755 build/bin/{bitcoin-cli,bitcoin-tx,bitcoin-util,bitcoin-wallet,bitcoind} "${pkgdir}/usr/bin/"
38
39
install -dm755 "${pkgdir}/usr/share/man/man1"
40
install -Dm755 doc/man/{bitcoin-cli.1,bitcoin-tx.1,bitcoin-util.1,bitcoin-wallet.1,bitcoind.1} "${pkgdir}/usr/share/man/man1/"
41
42
install -Dm644 share/examples/bitcoin.conf "${pkgdir}/etc/bitcoin/bitcoin.conf"
43
44
install -Dm644 contrib/init/bitcoind.service "${pkgdir}/etc/systemd/system/bitcoind.service"
45
}
46
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |