grml-full-systemd-boot

MEDIUM

maintainer barbuk 1 votes scanned 2026-09-04 07:57:01.997051

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 https://download.grml.org/grml-full-"${pkgver}"-amd64.iso

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Julien Virey <julien.virey+aur@gmail.com>
    
      2# Contributor: Christian Holme (Nordwin) <hcmh [at] mailbox [dot] org>
    
      3# Contributor: Nicolas Stalder <n+archlinux@stalder.io>
    
      4pkgname=grml-full-systemd-boot
    
      5pkgver=2026.09
    
      6pkgrel=1
    
      7pkgdesc="GRML-full as systemd-boot loader entry"
    
      8url="https://wiki.archlinux.org/title/Systemd-boot#Grml_on_ESP"
    
      9arch=('x86_64')
    
      10license=(GPL-2.0-or-later)
    
      11depends=(systemd)
    
      12options=('!debug')
    
      13backup=("boot/loader/entries/grml-full.conf")
    
      14source=(
    
      15  https://download.grml.org/grml-full-"${pkgver}"-amd64.iso
    
      16  grml-full.conf
    
      17)
    
      18noextract=(grml-full-"${pkgver}"-amd64.iso)
    
      19
    
      20sha256sums=('76e8019ff1b68ddb3e49cecb1ea35ecead9e0f1c1ba22c0e819c9b13de939e72'
    
      21            'c5fbdf83f1dcf220ad764175ab0eda013edd7d86ffccda747ea41ce1a8ba7b1f')
    
      22
    
      23prepare() {
    
      24  cd "${srcdir}"
    
      25  bsdtar xf grml-full-"${pkgver}"-amd64.iso \
    
      26    boot/grmlfullamd64/vmlinuz \
    
      27    boot/grmlfullamd64/initrd.img \
    
      28    live/grml-full-amd64/grml-full-amd64.squashfs
    
      29}
    
      30
    
      31package() {
    
      32  install -d ${pkgdir}/boot/grml
    
      33  cp "${srcdir}"/boot/grmlfullamd64/vmlinuz "${pkgdir}"/boot/grml/vmlinuz-grml-full
    
      34  cp "${srcdir}"/boot/grmlfullamd64/initrd.img "${pkgdir}"/boot/grml/initrd-grml-full.img
    
      35  cp "${srcdir}"/live/grml-full-amd64/grml-full-amd64.squashfs "${pkgdir}"/boot/grml
    
      36  install -d -m 755 "${pkgdir}"/boot/loader/entries
    
      37  cp grml-full.conf "${pkgdir}"/boot/loader/entries/grml-full.conf
    
      38}
    
      39

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-04 07:57
@@ -2,7 +2,7 @@
 # Contributor: Christian Holme (Nordwin) <hcmh [at] mailbox [dot] org>
 # Contributor: Nicolas Stalder <n+archlinux@stalder.io>
 pkgname=grml-full-systemd-boot
-pkgver=2026.04
+pkgver=2026.09
 pkgrel=1
 pkgdesc="GRML-full as systemd-boot loader entry"
 url="https://wiki.archlinux.org/title/Systemd-boot#Grml_on_ESP"
@@ -17,7 +17,7 @@
 )
 noextract=(grml-full-"${pkgver}"-amd64.iso)
 
-sha256sums=('44791d71752972f2105a4895dc9df3c16c9ef4e325cbdb2d10ea45b55995f8ff'
+sha256sums=('76e8019ff1b68ddb3e49cecb1ea35ecead9e0f1c1ba22c0e819c9b13de939e72'
             'c5fbdf83f1dcf220ad764175ab0eda013edd7d86ffccda747ea41ce1a8ba7b1f')
 
 prepare() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-04 07:57:01	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1