dockerfile-pin

LOW
maintainer barbuk 1 votes scanned 2026-08-25 05:25:49.966969
View on AUR
Why flagged

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

1# Maintainer: Julien Virey <julien.virey@gmail.com>
2
3pkgname=dockerfile-pin
4pkgver=1.3.0
5pkgrel=1
6pkgdesc='A CLI tool for digest pinning for Dockerfile, docker-compose.yml and GitHub Actions'
7arch=(x86_64 aarch64)
8url='https://github.com/azu/dockerfile-pin'
9license=(MIT)
10conflicts=("${pkgname}-bin")
11depends=(glibc)
12makedepends=('go')
13options=(!lto)
14source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
15sha256sums=('04a7c12ff35233e57eacff20d788380a4b5fd6e847928af9053d28e2bcc37b6d')
16
17prepare() {
18 cd "$pkgname-$pkgver"
19 export GOMODCACHE="${GOMODCACHE:-$srcdir/gomod}"
20 go mod download -modcacherw
21}
22
23build() {
24 cd "$pkgname-$pkgver"
25 mkdir -p build
26
27 export CGO_CPPFLAGS="${CPPFLAGS}"
28 export CGO_CFLAGS="${CFLAGS}"
29 export CGO_CXXFLAGS="${CXXFLAGS}"
30 export CGO_LDFLAGS="${LDFLAGS}"
31 export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
32
33 go build -ldflags="-w -s -linkmode=external -X github.com/azu/dockerfile-pin/cmd.version=${pkgver}" .
34
35 # Clean up deps
36 go clean -modcache
37}
38
39package() {
40 cd "$pkgname-$pkgver"
41 install -Dm755 "$pkgname" "$pkgdir/usr/bin/$pkgname"
42 install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
43}
44

Scan history

Scanned at (UTC)SeverityRules
2026-08-25 05:25:49 Low 1
2026-08-12 00:27:08 Clean 2
2026-08-11 13:21:13 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion