flamenco-worker-bin

maintainer snis · 0 votes · base flamenco-bin · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged Prebuilt binaries downloaded directly from the official Blender/Flamenco project domain (flamenco.blender.org) with sha256 checksums; the 'non-standard host' flag is a false positive since this is the project's own official download infrastructure.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 85%): Prebuilt binaries downloaded directly from the official Blender/Flamenco project domain (flamenco.blender.org) with sha256 checksums; the 'non-standard host' flag is a false positive since this is the project's own official download infrastructure.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:12 "https://flamenco.blender.org/downloads/flamenco-${pkgver}-linux-amd64.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Snis <aur@snis.org>
    
      2
    
      3pkgbase=flamenco-bin
    
      4pkgname=('flamenco-manager-bin' 'flamenco-worker-bin')
    
      5pkgver=3.9.3
    
      6pkgrel=1
    
      7pkgdesc='Render farm management software for animation and visual effects'
    
      8arch=('x86_64')
    
      9url='https://flamenco.blender.org/'
    
      10license=('GPL-3.0-or-later')
    
      11source=(
    
      12  "https://flamenco.blender.org/downloads/flamenco-${pkgver}-linux-amd64.tar.gz"
    
      13  'flamenco-manager@.service'
    
      14  'flamenco-worker@.service'
    
      15  'README.Arch'
    
      16  'flamenco-manager-bin.install'
    
      17  'flamenco-worker-bin.install'
    
      18)
    
      19sha256sums=(
    
      20  'c3cf18daac34cbfc34e87c8aee883da351c0d31fedd498f445b815698cf504f2'
    
      21  '951831a548eb67e181c6e3fa4e00863793815f56abb1c565ce5e3b929b26140f'
    
      22  '88d58aa2b60e78da7a0a6031dd57b566a69bcd8c14d42a898ad73a5031e2ff8a'
    
      23  'd369edabb4d1c38eb0410df0e02ef8e9b79f2524b4e41e23591494cf15404d64'
    
      24  '6b1e22b3f3227dad86b56d779a7a7a3d02b566a301619891b999709d9b832d5e'
    
      25  '010a7595cdefde65d3da0d6df8f25633f31e2c73342bcd22146f24d17ee035c4'
    
      26)
    
      27
    
      28package_flamenco-manager-bin() {
    
      29  pkgdesc='Manager for the Flamenco render farm system'
    
      30  provides=("flamenco-manager=$pkgver")
    
      31  conflicts=('flamenco-manager')
    
      32  install='flamenco-manager-bin.install'
    
      33
    
      34  install -Dm755 "$srcdir/flamenco-${pkgver}-linux-amd64/flamenco-manager" \
    
      35    "$pkgdir/usr/bin/flamenco-manager"
    
      36  install -Dm644 "$srcdir/flamenco-manager@.service" \
    
      37    "$pkgdir/usr/lib/systemd/system/flamenco-manager@.service"
    
      38  install -Dm644 "$srcdir/README.Arch" \
    
      39    "$pkgdir/usr/share/doc/$pkgname/README.Arch"
    
      40  install -Dm644 "$srcdir/flamenco-${pkgver}-linux-amd64/LICENSE" \
    
      41    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      42}
    
      43
    
      44package_flamenco-worker-bin() {
    
      45  pkgdesc='Worker for the Flamenco render farm system'
    
      46  depends=('ffmpeg')
    
      47  optdepends=('blender: render Blender jobs')
    
      48  provides=("flamenco-worker=$pkgver")
    
      49  conflicts=('flamenco-worker')
    
      50  install='flamenco-worker-bin.install'
    
      51
    
      52  install -Dm755 "$srcdir/flamenco-${pkgver}-linux-amd64/flamenco-worker" \
    
      53    "$pkgdir/usr/bin/flamenco-worker"
    
      54  install -Dm644 "$srcdir/flamenco-worker@.service" \
    
      55    "$pkgdir/usr/lib/systemd/system/flamenco-worker@.service"
    
      56  install -Dm644 "$srcdir/README.Arch" \
    
      57    "$pkgdir/usr/share/doc/$pkgname/README.Arch"
    
      58  install -Dm644 "$srcdir/flamenco-${pkgver}-linux-amd64/LICENSE" \
    
      59    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      60}
    
      61

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	3
2026-08-17 00:18:29	LOW	3
2026-08-16 00:03:42	LOW	3
2026-08-15 13:30:33	MEDIUM	2
2026-08-15 11:31:50	LOW	3
2026-08-15 11:30:23	MEDIUM	2