chunghwa-post-webatm

MEDIUM

maintainer anenasa 1 votes scanned 2026-09-27 03:16:18.279095

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("ATMSetup-$pkgver.msi"::"https://webatm.post.gov.tw/postatm/cab/ATMSetup.msi"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: anenasa <anenasaa@yahoo.com>
    
      2# Contributor: Chih-Hsuan Yen <yan12125@gmail.com>
    
      3
    
      4pkgname=chunghwa-post-webatm
    
      5epoch=1
    
      6pkgver=1.2603.30.1
    
      7pkgrel=1
    
      8pkgdesc='WebATM plugin for Chunghwa Post (中華郵政 WebATM 元件)'
    
      9arch=(any)
    
      10url='https://webatm.post.gov.tw/'
    
      11license=(unknown)
    
      12depends=(gnutls pcsclite sh wine)
    
      13makedepends=(msitools gendesk perl-image-exiftool p7zip imagemagick)
    
      14source=("ATMSetup-$pkgver.msi"::"https://webatm.post.gov.tw/postatm/cab/ATMSetup.msi"
    
      15        "$pkgname")
    
      16sha256sums=('b058447151bb48e01777a04f306406e5e47c64f2f632a079560ec87726d5fc81'
    
      17            '2a21dba5dea4132d3693cf3d6332cee2f3a0be650f0e19e76ece27cd834abb75')
    
      18
    
      19prepare() {
    
      20  msiextract ATMSetup-$pkgver.msi
    
      21}
    
      22
    
      23pkgver() {
    
      24  # Credit: https://askubuntu.com/a/717855
    
      25  exiftool -s3 -ProductVersion ATMXHRService.exe
    
      26}
    
      27
    
      28build() {
    
      29  7z x ATMXHRService.exe .rsrc
    
      30  for icon in .rsrc/*/ICON/*.ico; do
    
      31    dimension=$(identify -format "%wx%h" $icon)
    
      32    mkdir -p icons/$dimension/apps
    
      33    magick $icon icons/$dimension/apps/$pkgname.png
    
      34  done
    
      35
    
      36  gendesk -n --pkgname "$pkgname" --name "Chunghwa Post WebATM" --categories "Office;Finance"
    
      37}
    
      38
    
      39package() {
    
      40  install -Dm755 $pkgname -t "$pkgdir"/usr/bin
    
      41  install -Dm644 ATMXHRService.exe -t "$pkgdir"/usr/share/$pkgname
    
      42  install -Dm644 cert.pem -t "$pkgdir"/usr/share/$pkgname
    
      43  install -Dm644 prikey.pem -t "$pkgdir"/usr/share/$pkgname
    
      44  install -Dm644 cacert.pem "$pkgdir"/usr/share/ca-certificates/trust-source/anchors/Chunghwa_Post_ATM.crt
    
      45  install -Dm644 $pkgname.desktop -t "$pkgdir"/usr/share/applications
    
      46  install -Ddm755 "$pkgdir"/usr/share/icons
    
      47  cp -dr --no-preserve=ownership icons "$pkgdir"/usr/share/icons/hicolor
    
      48  ln -s /usr/share/ca-certificates/trust-source/anchors/Chunghwa_Post_ATM.crt "$pkgdir"/usr/share/$pkgname/cacert.pem
    
      49}
    
      50
    
      51

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-27 03:16
@@ -3,7 +3,7 @@
 
 pkgname=chunghwa-post-webatm
 epoch=1
-pkgver=1.2508.12.1
+pkgver=1.2603.30.1
 pkgrel=1
 pkgdesc='WebATM plugin for Chunghwa Post (中華郵政 WebATM 元件)'
 arch=(any)
@@ -13,7 +13,7 @@
 makedepends=(msitools gendesk perl-image-exiftool p7zip imagemagick)
 source=("ATMSetup-$pkgver.msi"::"https://webatm.post.gov.tw/postatm/cab/ATMSetup.msi"
         "$pkgname")
-sha256sums=('32f83b1c0830c492311f0cb6eb0f3b76db5f65496322f73c5560b750a47dfa4b'
+sha256sums=('b058447151bb48e01777a04f306406e5e47c64f2f632a079560ec87726d5fc81'
             '2a21dba5dea4132d3693cf3d6332cee2f3a0be650f0e19e76ece27cd834abb75')
 
 prepare() {
@@ -22,7 +22,7 @@
 
 pkgver() {
   # Credit: https://askubuntu.com/a/717855
-  exiftool -ProductVersion ATMXHRService.exe | cut -f 2 -d : | sed 's# ##g'
+  exiftool -s3 -ProductVersion ATMXHRService.exe
 }
 
 build() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-27 03:16:18	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1