grml-iso

MEDIUM

maintainer Maxr 2 votes scanned 2026-09-04 07:57:01.997051

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("http://download.grml.org/grml${_isover}.iso")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Max Roder <maxroder@mailbox.org>
    
      2# Prev Maintainer: Xaekai <archuserrepo at pink dot horse>
    
      3# Prev Maintainer: Thiago Perrotta <perrotta dot thiago at poli dot ufrj dot br>
    
      4
    
      5pkgname=grml-iso
    
      6pkgver=2026.09
    
      7_isover="-full-$pkgver-amd64"
    
      8pkgrel=1
    
      9pkgdesc="provides the grml ISO image for usage by grml-rescueboot"
    
      10url="http://wiki.grml.org/doku.php?id=rescueboot"
    
      11arch=('any')
    
      12license=('GPL')
    
      13depends=('grub' 'grml-rescueboot>=0.5.0')
    
      14install="${pkgname}.install"
    
      15source=("http://download.grml.org/grml${_isover}.iso")
    
      16sha256sums=('76e8019ff1b68ddb3e49cecb1ea35ecead9e0f1c1ba22c0e819c9b13de939e72')
    
      17noextract=(grml${_isover}.iso)
    
      18
    
      19package() {
    
      20    install -Dm644 ${srcdir}/grml${_isover}.iso ${pkgdir}/opt/grml/grml${_isover}.iso
    
      21}
    
      22

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-04 07:57
@@ -3,7 +3,7 @@
 # Prev Maintainer: Thiago Perrotta <perrotta dot thiago at poli dot ufrj dot br>
 
 pkgname=grml-iso
-pkgver=2026.04
+pkgver=2026.09
 _isover="-full-$pkgver-amd64"
 pkgrel=1
 pkgdesc="provides the grml ISO image for usage by grml-rescueboot"
@@ -13,7 +13,7 @@
 depends=('grub' 'grml-rescueboot>=0.5.0')
 install="${pkgname}.install"
 source=("http://download.grml.org/grml${_isover}.iso")
-sha256sums=('44791d71752972f2105a4895dc9df3c16c9ef4e325cbdb2d10ea45b55995f8ff')
+sha256sums=('76e8019ff1b68ddb3e49cecb1ea35ecead9e0f1c1ba22c0e819c9b13de939e72')
 noextract=(grml${_isover}.iso)
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-04 07:57:01	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1