linux-fsync-nobara-bin

maintainer figue · 9 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt RPMs from Fedora's COPR infrastructure, which is a legitimate and trusted build service; although the host is not on a standard whitelist, the source is from an official project channel, and the downloads are verified via provided checksums, reducing risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt RPMs from Fedora's COPR infrastructure, which is a legitimate and trusted build service; although the host is not on a standard whitelist, the source is from an official project channel, and the downloads are verified via provided checksums, reducing risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:25 source=("https://download.copr.fedorainfracloud.org/results/gloriouseggroll/nobara-${fedora}/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-core-${pkgver}-${extras}.x86_64.rpm"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Joan Figueras <ffigue at gmail dot com>
    
      2# Contributor: Torge Matthies <openglfreak at googlemail dot com>
    
      3# Contributor: Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
    
      4
    
      5pkgbase=linux-fsync-nobara-bin
    
      6pkgname=${pkgbase}
    
      7pkgver=7.0.11
    
      8pkgrel=1
    
      9build_id=10532763
    
      10fedora=43
    
      11extras=200.nobara.fc${fedora}
    
      12printf -v l_build_id %08d%s ${build_id}
    
      13pkgdesc='The Linux kernel and modules of Nobara Project - Prebuilt version'
    
      14url="https://nobaraproject.org"
    
      15arch=(x86_64)
    
      16license=(GPL2)
    
      17options=('!strip')
    
      18depends=(coreutils kmod initramfs)
    
      19optdepends=('crda: to set the correct wireless channels of your country'
    
      20            'linux-firmware: firmware images needed for some devices')
    
      21provides=(VIRTUALBOX-GUEST-MODULES
    
      22          WIREGUARD-MODULE
    
      23          KSMBD-MODULE
    
      24          NTFS3-MODULE)
    
      25source=("https://download.copr.fedorainfracloud.org/results/gloriouseggroll/nobara-${fedora}/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-core-${pkgver}-${extras}.x86_64.rpm"
    
      26        "https://download.copr.fedorainfracloud.org/results/gloriouseggroll/nobara-${fedora}/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-modules-${pkgver}-${extras}.x86_64.rpm"
    
      27        "https://download.copr.fedorainfracloud.org/results/gloriouseggroll/nobara-${fedora}/fedora-${fedora}-x86_64/${l_build_id}-kernel/kernel-devel-${pkgver}-${extras}.x86_64.rpm")
    
      28validpgpkeys=(
    
      29    'ABAF11C65A2970B130ABE3C479BE3E4300411886' # Linux Torvalds
    
      30    '647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman
    
      31)
    
      32
    
      33sha256sums=('6817f706466b14a36d4d19e032145e1fc7201eae99d90b26eef15a5671396cfd'
    
      34            '26bf525e7e105f9b20543b77e2e813a226768b79b6819e365bd0a580c09e9981'
    
      35            '76489bca115b03c1af8391bed554454ffb501def7a6042d0d4a0b2f95a08430b')
    
      36
    
      37package() {
    
      38
    
      39  local srcmodulesdir=$(ls -d ${srcdir}/lib/modules/${pkgver}*)
    
      40  local kernver="${srcmodulesdir#${srcdir}/lib/modules/}"
    
      41  local modulesdir="${pkgdir}/usr/lib/modules/${kernver}"
    
      42  mkdir -p "${modulesdir}"
    
      43
    
      44  msg2 "Installing modules..."
    
      45  cp -r ${srcmodulesdir} "${pkgdir}/usr/lib/modules"
    
      46  cp -r "${srcdir}/usr" "${pkgdir}/"
    
      47
    
      48  #msg2 "Installing boot image..."
    
      49  #install -Dm644 "$modulesdir/vmlinuz" "boot/vmlinuz-${pkgver}-fsync-nobara"
    
      50
    
      51  # Used by dmks
    
      52  rm -fv "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build
    
      53  mv -v "${pkgdir}"/usr/src/kernels/${pkgver}-${extras}.x86_64 "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build
    
      54  rmdir -v "${pkgdir}"/usr/src/kernels
    
      55  cd "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64
    
      56  ln -sr "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/build "$pkgdir/usr/src/$pkgbase"
    
      57
    
      58  # Perms
    
      59  chmod 644 "${pkgdir}"/usr/lib/modules/${pkgver}-${extras}.x86_64/vmlinuz
    
      60
    
      61  # Used by mkinitcpio to name the kernel
    
      62  echo "${pkgname}" | install -Dm644 /dev/stdin "${modulesdir}/pkgbase"
    
      63
    
      64}
    
      65
    
      66# vim:set ts=8 sts=2 sw=2 et:
    
      67

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2