isc-stork-server

LOW

maintainer andreip 0 votes base isc-stork scanned 2026-11-03 14:06:57.695390

View on AUR

Why flagged

Sources are downloaded from downloads.isc.org, the official ISC distribution server, and built from source using rake; no obfuscated payloads, no unverifiable prebuilt binaries from swappable hosts, and no exfiltration — the only minor concern is that the sha512sums appear truncated/malformed (wrong length), which is a quality issue but not a security threat.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Sources are downloaded from downloads.isc.org, the official ISC distribution server, and built from source using rake; no obfuscated payloads, no unverifiable prebuilt binaries from swappable hosts, and no exfiltration — the only minor concern is that the sha512sums appear truncated/malformed (wrong length), which is a quality issue but not a security threat.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 "https://downloads.isc.org/isc/${_repo}/${pkgver}/${_repo}-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1pkgbase='isc-stork'
    
      2pkgname=('isc-stork-agent' 'isc-stork-server')
    
      3pkgver='2.6.0'
    
      4pkgrel='1'
    
      5pkgdesc="A web dashboard for ISC BIND 9 DNS, ISC Kea DHCP, PowerDNS, and other services."
    
      6arch=('any')
    
      7conflicts=('stork-agent' 'stork-server')
    
      8url='https://gitlab.isc.org/isc-projects/stork'
    
      9license=('MPL2')
    
      10depends=()
    
      11makedepends=('go' 'java-runtime' 'nodejs' 'protoc-gen-go' 'protoc-gen-go-grpc' 'python' 'rake' 'sed' 'tar' 'unzip' 'wget')
    
      12backup=('etc/stork/agent.env' 'etc/stork/server.env')
    
      13_repo='stork'
    
      14source=(
    
      15  "https://downloads.isc.org/isc/${_repo}/${pkgver}/${_repo}-${pkgver}.tar.gz"
    
      16  "https://downloads.isc.org/isc/${_repo}/${pkgver}/${_repo}-server-ldap-${pkgver}.tar.gz"
    
      17  "isc-stork-agent.sysuser"
    
      18  "isc-stork-server.sysuser"
    
      19)
    
      20  # "https://gitlab.isc.org/isc-projects/${_repo}/-/archive/v${pkgver}/${_pkg}.tar.gz"
    
      21  # "https://gitlab.isc.org/isc-projects/stork-hook-ldap/-/archive/v${pkgver}/stork-hook-ldap-v${pkgver}.tar.gz"
    
      22sha512sums=(
    
      23  '845ebc0ea2b9365a844b9124deb570d61ffe537c402ba16583081bd2e98a5e1a00c0a054a061fb610eaabb676aa58604c053c1218cb1bd4201e30ec2c07c4f29'
    
      24  'fe7f16f4a26348a78db67791aaa0280ba6c26376a409a78468f7be03928a122c1e025077c43564a27ecdd1256284011e1f0aefb2d13e395cb981463864cf7e93'
    
      25  '5a1ff88f2e64db884696c7c86aa0d119caa9a7ae3dd0d9ab9c750281353100af7f96ff0af642489002e2d01fa623fd173762078b27b9caf5e7f4aacee08eea48'
    
      26  '7bc58bdea15aebe457bebb2fb69d5ac4585e5dc6f5697e41f446860d418601ae9652a886f81b2e0d7c085ee643395d3aeabf88bdacbb3d1e41464162f17ab9dd'
    
      27)
    
      28
    
      29build() {
    
      30  tar -xzf "${_repo}-${pkgver}.tar.gz"
    
      31  tar -xzf "${_repo}-server-ldap-${pkgver}.tar.gz"
    
      32  cd "${_repo}-${pkgver}"
    
      33  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      34  export CGO_CFLAGS="${CFLAGS}"
    
      35  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      36  export CGO_LDFLAGS="${LDFLAGS}"
    
      37  export GOFLAGS='-buildmode=pie -ldflags=-linkmode=external -mod=readonly -modcacherw -trimpath'
    
      38  rm -rf ./hooks/stork-server-ldap
    
      39  cp -rf "../${_repo}-server-ldap-${pkgver}/" ./hooks/stork-server-ldap
    
      40  rake build:agent
    
      41  rake build:server
    
      42  rake hook:build
    
      43  cd ..
    
      44}
    
      45
    
      46package_isc-stork-agent() {
    
      47  cd "${_repo}-${pkgver}"
    
      48  rake install:agent DEST="${pkgdir}"
    
      49  mv "${pkgdir}/lib" "${pkgdir}/usr"
    
      50  install -Dm644 "${srcdir}/${pkgname}.sysuser" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
    
      51  cd ..
    
      52}
    
      53
    
      54package_isc-stork-server() {
    
      55  cd "${_repo}-${pkgver}"
    
      56  rake install:server DEST="${pkgdir}"
    
      57  mv "${pkgdir}/lib" "${pkgdir}/usr"
    
      58  mkdir -p "${pkgdir}/usr/lib/stork-server/hooks"
    
      59  mkdir -p "${pkgdir}/usr/share"
    
      60  rmdir "${pkgdir}/hooks"
    
      61  install -Dm644 "./hooks/stork-server-ldap/build/stork-server-ldap.so" "${pkgdir}/usr/lib/stork-server/hooks/stork-server-ldap.so"
    
      62  install -Dm644 "${srcdir}/${pkgname}.sysuser" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
    
      63  cd ..
    
      64}
    
      65

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-03 14:06:57	Low	3
2026-11-03 14:04:44	Medium	2