filebot

LOW

maintainer mithrial 138 votes scanned 2026-09-10 15:20:39.512721

View on AUR

Triggered rules

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:29 source=("https://get.filebot.net/filebot/FileBot_${pkgver}/FileBot_${pkgver}-aur.tar.xz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Roman Vasilev <2rvasilev@live.ru>
    
      2# Maintainer: max.bra <max dot bra at alice dot it>
    
      3# Contributor: nadolph
    
      4# Contributor: dcelasun
    
      5# Contributor: said
    
      6# Contributor: Kaurin <milos dot kaurin at gmail>
    
      7# Contributor: Nathan Owe <ndowens04 at gmail>
    
      8# Contributor: mithrial <mithrial@mailbox.org>
    
      9
    
      10pkgname=filebot
    
      11pkgver=5.2.3
    
      12pkgrel=1
    
      13pkgdesc="The ultimate TV and Movie Renamer"
    
      14arch=('i686' 'x86_64' 'aarch64' 'armv7l' 'armv7h')
    
      15url="https://www.filebot.net/"
    
      16license=('Commercial')
    
      17depends=('java-runtime' 'fontconfig' 'chromaprint')
    
      18makedepends=()
    
      19checkdepends=()
    
      20
    
      21optdepends=('libzen: Required by libmediainfo'
    
      22            'libmediainfo: Read media info such as video codec, resolution or duration'
    
      23            'gvfs: Drag-n-Drop from GVFS remote filesystems')
    
      24
    
      25provides=('filebot')
    
      26
    
      27conflicts=('filebot47' 'filebot-git')
    
      28install=$pkgname.install
    
      29source=("https://get.filebot.net/filebot/FileBot_${pkgver}/FileBot_${pkgver}-aur.tar.xz"
    
      30        "https://get.filebot.net/filebot/FileBot_${pkgver}/FileBot_${pkgver}-aur.tar.xz.asc"
    
      31        "filebot.sh")
    
      32
    
      33b2sums=('ffa89dbb30d3435f28ba0ff9ee8a76805b37eb7cfa75642f81091fad269e09db86d6ca8c9f052ef4fd3d1cf95a4bad2d469d46863f9b1d2947ec0272ba76ca1d'
    
      34        'SKIP'
    
      35        'ef7d2169f2a71925835678a481b1a063f4d11a49ce741affd70d59dd1ef940f17090dd60383de2da4008e08823117796dc3b4c7e4805dd4de2a89d4c4805f66f')
    
      36validpgpkeys=('B0976E51E5C047AD0FD051294E402EBF7C3C6A71')
    
      37
    
      38package() {
    
      39  mkdir -p "${pkgdir}/usr/bin"
    
      40  mkdir -p "${pkgdir}/usr/share/${pkgname}"
    
      41
    
      42  install -Dm755 "${pkgname}.sh" "${pkgdir}/usr/bin/${pkgname}"
    
      43
    
      44  cp -dpr --no-preserve=ownership "${srcdir}/etc" "${srcdir}/usr" "${pkgdir}"
    
      45}
    
      46

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-10 15:20:39	Low	1
2026-06-20 16:03:41	Clean	2
2026-06-20 00:50:07	Medium	2
2026-06-20 00:18:46	Low	1
2026-06-19 23:51:18	Medium	2
2026-06-19 19:07:35	Low	2
2026-06-18 18:04:49	Clean	2
2026-06-18 16:11:54	Low	1