dockerfile-pin
LOW
maintainer barbuk
1 votes
scanned 2026-08-25 05:25:49.966969
Why flagged
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
PKGBUILD
1
# Maintainer: Julien Virey <julien.virey@gmail.com>
2
3
pkgname=dockerfile-pin
4
pkgver=1.3.0
5
pkgrel=1
6
pkgdesc='A CLI tool for digest pinning for Dockerfile, docker-compose.yml and GitHub Actions'
7
arch=(x86_64 aarch64)
8
url='https://github.com/azu/dockerfile-pin'
9
license=(MIT)
10
conflicts=("${pkgname}-bin")
11
depends=(glibc)
12
makedepends=('go')
13
options=(!lto)
14
source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz")
15
sha256sums=('04a7c12ff35233e57eacff20d788380a4b5fd6e847928af9053d28e2bcc37b6d')
16
17
prepare() {
18
cd "$pkgname-$pkgver"
19
export GOMODCACHE="${GOMODCACHE:-$srcdir/gomod}"
20
go mod download -modcacherw
21
}
22
23
build() {
24
cd "$pkgname-$pkgver"
25
mkdir -p build
26
27
export CGO_CPPFLAGS="${CPPFLAGS}"
28
export CGO_CFLAGS="${CFLAGS}"
29
export CGO_CXXFLAGS="${CXXFLAGS}"
30
export CGO_LDFLAGS="${LDFLAGS}"
31
export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
32
33
go build -ldflags="-w -s -linkmode=external -X github.com/azu/dockerfile-pin/cmd.version=${pkgver}" .
34
35
# Clean up deps
36
go clean -modcache
37
}
38
39
package() {
40
cd "$pkgname-$pkgver"
41
install -Dm755 "$pkgname" "$pkgdir/usr/bin/$pkgname"
42
install -Dm644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
43
}
44
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-25 05:25:49 | Low | 1 |
| 2026-08-12 00:27:08 | Clean | 2 |
| 2026-08-11 13:21:13 | Low | 1 |