chatgpt-desktop-app-bin

maintainer czyt · 0 votes · scanned 2026-08-18 01:38:17.845211

MEDIUM

Why flagged One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:62 "${_deb_x86_64}::https://persistent.oaistatic.com/codex-app-prod/linux/deb/latest/chatgpt_amd64.deb"

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: czyt <czytcn@gmail.com>
    
      2# Official downloads: https://chatgpt.com/codex/
    
      3
    
      4pkgname=chatgpt-desktop-app-bin
    
      5pkgver=26.814.41407
    
      6pkgrel=1
    
      7pkgdesc="Official ChatGPT desktop app with Codex"
    
      8arch=('x86_64' 'aarch64')
    
      9url="https://chatgpt.com/codex/"
    
      10license=('custom')
    
      11
    
      12depends=(
    
      13  'alsa-lib'
    
      14  'at-spi2-core'
    
      15  'bash'
    
      16  'cairo'
    
      17  'dbus'
    
      18  'expat'
    
      19  'gcc-libs'
    
      20  'gdk-pixbuf2'
    
      21  'glib2'
    
      22  'glibc'
    
      23  'gtk3'
    
      24  'libcups'
    
      25  'libdrm'
    
      26  'libglvnd'
    
      27  'libnotify'
    
      28  'libusb'
    
      29  'libx11'
    
      30  'libxcb'
    
      31  'libxcomposite'
    
      32  'libxdamage'
    
      33  'libxext'
    
      34  'libxfixes'
    
      35  'libxkbcommon'
    
      36  'libxrandr'
    
      37  'mesa'
    
      38  'nspr'
    
      39  'nss'
    
      40  'openssl'
    
      41  'pango'
    
      42  'systemd-libs'
    
      43  'xdg-utils'
    
      44  'xz'
    
      45)
    
      46
    
      47optdepends=(
    
      48  'apparmor: load the bundled user-namespace profile on AppArmor systems'
    
      49  'git: version control integration'
    
      50)
    
      51
    
      52makedepends=('libarchive')
    
      53provides=('chatgpt' 'chatgpt-desktop-app' 'openai-codex-desktop')
    
      54conflicts=('chatgpt' 'chatgpt-desktop-app' 'codex-desktop-app' 'openai-codex-desktop')
    
      55replaces=('codex-desktop-app')
    
      56options=('!debug' '!strip')
    
      57
    
      58_deb_x86_64="chatgpt_${pkgver}_amd64.deb"
    
      59_deb_aarch64="chatgpt_${pkgver}_arm64.deb"
    
      60source=('chatgpt-launcher.sh')
    
      61source_x86_64=(
    
      62  "${_deb_x86_64}::https://persistent.oaistatic.com/codex-app-prod/linux/deb/latest/chatgpt_amd64.deb"
    
      63)
    
      64source_aarch64=(
    
      65  "${_deb_aarch64}::https://persistent.oaistatic.com/codex-app-prod/linux/deb/latest/chatgpt_arm64.deb"
    
      66)
    
      67noextract=("${_deb_x86_64}" "${_deb_aarch64}")
    
      68sha256sums=('56a14509725adb2ab66c6218295030f56470ecd4ca66fb47b6355809903b7382')
    
      69sha256sums_x86_64=('053d5ace91c48a17146aef02ca4abb00a2b1e94ffd15ca01891fd84a8227ca80')
    
      70sha256sums_aarch64=('223dfd7f72a515737a5065a780485f3d6a7a8df40fca4f86d028fb953f6749bf')
    
      71
    
      72package() {
    
      73  cd "${srcdir}"
    
      74
    
      75  local deb_var="_deb_${CARCH}"
    
      76  local deb="${!deb_var}"
    
      77
    
      78  bsdtar -xOf "${deb}" data.tar.xz |
    
      79    bsdtar --no-same-owner -xf - -C "${pkgdir}"
    
      80
    
      81  rm "${pkgdir}/usr/bin/chatgpt"
    
      82  install -Dm755 chatgpt-launcher.sh "${pkgdir}/usr/bin/chatgpt"
    
      83  ln -s chatgpt "${pkgdir}/usr/bin/codex-desktop"
    
      84
    
      85  install -Dm644 "${pkgdir}/usr/share/doc/chatgpt/copyright" \
    
      86    "${pkgdir}/usr/share/licenses/${pkgname}/copyright"
    
      87
    
      88  # Debian package-policy files are not used on Arch Linux.
    
      89  rm -rf "${pkgdir}/usr/share/doc" "${pkgdir}/usr/share/lintian"
    
      90}
    
      91

Changes since previous scan

--- PKGBUILD @ 2026-08-18 00:03
+++ PKGBUILD @ 2026-08-18 01:38
@@ -2,7 +2,7 @@
 # Official downloads: https://chatgpt.com/codex/
 
 pkgname=chatgpt-desktop-app-bin
-pkgver=26.810.52044
+pkgver=26.814.41407
 pkgrel=1
 pkgdesc="Official ChatGPT desktop app with Codex"
 arch=('x86_64' 'aarch64')
@@ -66,8 +66,8 @@
 )
 noextract=("${_deb_x86_64}" "${_deb_aarch64}")
 sha256sums=('56a14509725adb2ab66c6218295030f56470ecd4ca66fb47b6355809903b7382')
-sha256sums_x86_64=('708a15a1bb76e2bb7f0e376e5145391fa277ad3a64057c1d32537bdc2a1b4e6e')
-sha256sums_aarch64=('6ebea681b1e494d218a199f638b4bc886e94e1458dd61079b1e390a6fb98fdd2')
+sha256sums_x86_64=('053d5ace91c48a17146aef02ca4abb00a2b1e94ffd15ca01891fd84a8227ca80')
+sha256sums_aarch64=('223dfd7f72a515737a5065a780485f3d6a7a8df40fca4f86d028fb953f6749bf')
 
 package() {
   cd "${srcdir}"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 01:38:17	MEDIUM	2
2026-08-18 00:03:42	LOW	3
2026-08-17 00:18:29	LOW	3
2026-08-16 00:03:42	LOW	3
2026-08-15 07:30:18	MEDIUM	2
2026-08-15 00:26:13	LOW	3
2026-08-14 19:29:30	MEDIUM	2
2026-08-14 00:03:41	LOW	3
2026-08-13 21:26:43	MEDIUM	2
2026-08-13 00:17:07	LOW	3
2026-08-12 05:26:53	LOW	3
2026-08-12 05:22:53	MEDIUM	2