goose-desktop-bin
MEDIUM
maintainer sheikhlimon
7 votes
scanned 2026-08-28 17:36:11.985848
Why flagged
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
Triggered rules
Medium
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1
# Maintainer: Sheikh Limon <sheikhlimon404@gmail.com>
2
3
pkgname=goose-desktop-bin
4
pkgver=1.48.0
5
pkgrel=1
6
pkgdesc="Goose Desktop and CLI (prebuilt) - an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM"
7
arch=('x86_64')
8
url="https://github.com/aaif-goose/goose"
9
license=('Apache-2.0')
10
provides=('goose-desktop')
11
conflicts=('goose-desktop')
12
depends=(
13
'glibc' 'gcc-libs'
14
'gtk3' 'libnotify' 'nss' 'xdg-utils'
15
'at-spi2-core' 'libdrm' 'mesa' 'libxcb'
16
'alsa-lib' 'trash-cli'
17
)
18
optdepends=(
19
'vulkan-icd-loader: hardware GPU acceleration'
20
'libcups: printing support'
21
)
22
options=(!strip)
23
source=(
24
"goose_${pkgver}_amd64-vulkan.deb::https://github.com/aaif-goose/goose/releases/download/v${pkgver}/goose_${pkgver}_amd64-vulkan.deb"
25
"goose-cli-${pkgver}.tar.bz2::https://github.com/aaif-goose/goose/releases/download/v${pkgver}/goose-x86_64-unknown-linux-gnu.tar.bz2"
26
)
27
b2sums=('ff7e13fd443738c729f37c62c60a4b124aeff1380610d2066a89890711b48b71c223ee063f806cf559c45f3667e516e557f32abdc690cbf36fee8f7d4ee35c63'
28
'6662b7dedc9a9f8fad404744d719dc791d4624716bcb6b557a92187796bc4fee8e18c7f4be39eac81d32e85d6f81048de9c92a1ece62e26e5df15d95fe3fd368')
29
30
build() { :; }
31
32
package() {
33
# unpack the deb
34
bsdtar -xf "${srcdir}/goose_${pkgver}_amd64-vulkan.deb" -C "${srcdir}"
35
bsdtar -xf "${srcdir}"/data.tar.* -C "${pkgdir}"
36
37
rm -f "${pkgdir}/usr/bin/goose"
38
39
# 2) Relocate the Electron bundle to a desktop-specific dir to avoid name ambiguity
40
# (optional but cleaner). Keep it under /opt/goose-desktop.
41
install -d "${pkgdir}/opt/goose-desktop"
42
mv "${pkgdir}/usr/lib/goose/"* "${pkgdir}/opt/goose-desktop/"
43
rmdir "${pkgdir}/usr/lib/goose" || true
44
45
# Optional: setuid sandbox (many Electron -bin packages do this; harmless if userns is enabled)
46
if [[ -f "${pkgdir}/opt/goose-desktop/chrome-sandbox" ]]; then
47
chmod 4755 "${pkgdir}/opt/goose-desktop/chrome-sandbox" || true
48
fi
49
50
# 3) Provide a desktop-specific launcher on PATH
51
install -d "${pkgdir}/usr/bin"
52
# The real Electron binary in your tree is capital 'Goose'
53
cat > "${pkgdir}/usr/bin/goose-desktop" <<'EOF'
54
#!/usr/bin/env bash
55
set -euo pipefail
56
APPDIR="/opt/goose-desktop"
57
[[ -x "$APPDIR/Goose" ]] || APPDIR="/usr/lib/goose-desktop"
58
EXEC="$APPDIR/Goose"
59
XDG_CONFIG_HOME="${XDG_CONFIG_HOME:-$HOME/.config}"
60
FLAGS_FILE="$XDG_CONFIG_HOME/goose-desktop-flags.conf"
61
if [[ -f "$FLAGS_FILE" ]]; then
62
GOOSE_USER_FLAGS="$(sed 's/#.*//' "$FLAGS_FILE" | tr '\n' ' ')"
63
fi
64
exec "$EXEC" "$@" ${GOOSE_USER_FLAGS:-}
65
EOF
66
chmod 755 "${pkgdir}/usr/bin/goose-desktop"
67
68
# 4) Fix the desktop entry to call goose-desktop and set StartupWMClass for Wayland window matching
69
if [[ -f "${pkgdir}/usr/share/applications/goose.desktop" ]]; then
70
mv "${pkgdir}/usr/share/applications/goose.desktop" \
71
"${pkgdir}/usr/share/applications/goose-desktop.desktop"
72
sed -i \
73
-e 's|^Exec=.*|Exec=/usr/bin/goose-desktop %U|' \
74
-e 's|^Name=Goose$|Name=Goose Desktop|' \
75
"${pkgdir}/usr/share/applications/goose-desktop.desktop"
76
if ! grep -q '^StartupWMClass=' "${pkgdir}/usr/share/applications/goose-desktop.desktop"; then
77
echo "StartupWMClass=Goose" >> "${pkgdir}/usr/share/applications/goose-desktop.desktop"
78
else
79
sed -i 's|^StartupWMClass=.*|StartupWMClass=Goose|' "${pkgdir}/usr/share/applications/goose-desktop.desktop"
80
fi
81
# Keep Icon=goose (it refers to /usr/share/pixmaps/goose.png already shipped)
82
fi
83
84
# 5) (Optional) standard Arch license path if upstream included copyright file
85
if [[ -f "${pkgdir}/usr/share/doc/goose/copyright" ]]; then
86
install -Dm644 "${pkgdir}/usr/share/doc/goose/copyright" \
87
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
88
fi
89
90
# 6) Install the CLI binary from the second source (CLI tarball)
91
tar -xjf "${srcdir}/goose-cli-${pkgver}.tar.bz2" -C "${srcdir}"
92
install -m755 "${srcdir}/goose" "${pkgdir}/usr/bin/goose"
93
}
94
Changes since previous scan
--- PKGBUILD @ 2026-08-13 00:17+++ PKGBUILD @ 2026-08-28 17:36@@ -1,7 +1,7 @@ # Maintainer: Sheikh Limon <sheikhlimon404@gmail.com> pkgname=goose-desktop-bin-pkgver=1.46.0+pkgver=1.48.0 pkgrel=1 pkgdesc="Goose Desktop and CLI (prebuilt) - an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM" arch=('x86_64')@@ -24,8 +24,8 @@ "goose_${pkgver}_amd64-vulkan.deb::https://github.com/aaif-goose/goose/releases/download/v${pkgver}/goose_${pkgver}_amd64-vulkan.deb" "goose-cli-${pkgver}.tar.bz2::https://github.com/aaif-goose/goose/releases/download/v${pkgver}/goose-x86_64-unknown-linux-gnu.tar.bz2" )-b2sums=('adc13ecc535a4b5eedf9a3e9d41abe22c6b4c8967723e1c6947fac93da6ef4852c1d389e77656a849bbfa78b7daa50b4905276e155de9fe16cfcd3045f5d612a'- '530fb581955ed047c207f01a04aaabc7bc97374079a5f3c58f34bea99f7bf0d55306b0bef4d1529f74d45c1367e98bd94c7cbdf44d730a5512f826f18b47b461')+b2sums=('ff7e13fd443738c729f37c62c60a4b124aeff1380610d2066a89890711b48b71c223ee063f806cf559c45f3667e516e557f32abdc690cbf36fee8f7d4ee35c63'+ '6662b7dedc9a9f8fad404744d719dc791d4624716bcb6b557a92187796bc4fee8e18c7f4be39eac81d32e85d6f81048de9c92a1ece62e26e5df15d95fe3fd368') build() { :; } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-28 17:36:11 | Medium | 1 |
| 2026-08-13 00:17:07 | Clean | 2 |
| 2026-08-12 17:24:46 | Medium | 1 |
| 2026-08-12 05:22:53 | Medium | 1 |
| 2026-07-30 05:14:03 | Clean | 0 |
| 2026-07-23 21:26:05 | Clean | 0 |
| 2026-07-14 15:45:30 | Clean | 0 |
| 2026-07-13 21:43:03 | Clean | 0 |
| 2026-07-11 01:36:03 | Clean | 0 |
| 2026-07-05 15:17:57 | Clean | 0 |
| 2026-06-27 00:27:47 | Clean | 0 |
| 2026-06-18 16:11:54 | Clean | 0 |