nanox

maintainer gamezelda · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is downloaded from the official project host (pm.bsc.es), which is plausibly the project's own infrastructure, and the package builds from source; the non-whitelisted-host flag is a false positive due to domain not being on a standard whitelist, but the context confirms it is a legitimate project-owned domain.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from the official project host (pm.bsc.es), which is plausibly the project's own infrastructure, and the package builds from source; the non-whitelisted-host flag is a false positive due to domain not being on a standard whitelist, but the context confirms it is a legitimate project-owned domain.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("https://pm.bsc.es/ftp/${_bundlepkgname}/releases/${_bundlepkgname}-${_bundlepkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Joan Bruguera Micó <joanbrugueram@gmail.com>
    
      2pkgname='nanox'
    
      3_bundlepkgname='ompss'
    
      4pkgdesc='Nanos++ is a runtime designed to serve as runtime support in parallel environments. It is mainly used to support OmpSs, a extension to OpenMP developed at BSC.'
    
      5pkgver='0.15.20190627'
    
      6_bundlepkgver='19.06'
    
      7pkgrel='7'
    
      8arch=('x86_64')
    
      9url='https://pm.bsc.es/ompss'
    
      10license=('LGPL-3.0-or-later')
    
      11depends=(extrae sqlite3)
    
      12makedepends=(python)
    
      13source=("https://pm.bsc.es/ftp/${_bundlepkgname}/releases/${_bundlepkgname}-${_bundlepkgver}.tar.gz"
    
      14        "nanox-Fix-build-due-to-Werror-sign-compare-mismatch.patch"
    
      15        "nanox-Fix-build-due-to-use-of-deprecated-_sys_siglist.patch"
    
      16        "nanox-Fix-build-due-to-Werror-template-id-cdtor-fix-GCC-14.patch"
    
      17        "nanox-Fix-build-due-to-Wtemplate-body-fix-GCC-15.patch")
    
      18sha512sums=(159efc17ba446f3f2205a8c0580ed10fab263f8bdb7306d5444d1fc6a592f80d749c03031e7e416090360c36a51a38da083b2b2ed4e75dda5c55a103806d91d2
    
      19            d72f15c858309a5dbed09259e6700220c5b1d931aef9f37c9df0b9ccdf16c22b5d09f4efaab445e944f1a2dee9f5e6c8d96df34bfa765c8c47f6a212f8d168f6
    
      20            f900d2c30236ef641e1e527364324e317d1df2746082df0e0bf8adcceb279b7cde6f0c094576e330de24fc9d51f989016f6e2d50489e308fe2f8683acb3bf41c
    
      21            46a3aebbc723771fdb54e863463321dc0f58a3f95a20b953d767f88a54768bb50f0170139dc9ad0c181be41fa1ba684edc4e15e001553f15649129ec483efccf
    
      22            10a56957b12e669a323effac34cca37082df770747cbef69723835071ec4c31225427af70e5a409c3286fd300fb2ae7d0cfafb025f7c7089b30710e55d960aaf)
    
      23
    
      24prepare() {
    
      25	cd "$srcdir/${_bundlepkgname}-${_bundlepkgver}/$pkgname-${pkgver%.*}"
    
      26
    
      27	patch -Np1 -i "$srcdir/nanox-Fix-build-due-to-Werror-sign-compare-mismatch.patch"
    
      28	patch -Np1 -i "$srcdir/nanox-Fix-build-due-to-use-of-deprecated-_sys_siglist.patch"
    
      29	patch -Np1 -i "$srcdir/nanox-Fix-build-due-to-Werror-template-id-cdtor-fix-GCC-14.patch"
    
      30	patch -Np1 -i "$srcdir/nanox-Fix-build-due-to-Wtemplate-body-fix-GCC-15.patch"
    
      31}
    
      32
    
      33build() {
    
      34	cd "$srcdir/${_bundlepkgname}-${_bundlepkgver}/$pkgname-${pkgver%.*}"
    
      35
    
      36	# Avoid build failures under GCC 16 due to -Wunused-but-set-variable errors
    
      37	export CXXFLAGS="$CXXFLAGS -Wno-error=unused-but-set-variable"
    
      38
    
      39	# See https://hub.docker.com/r/bscpm/ompss/dockerfile
    
      40	./configure \
    
      41		--prefix=/usr \
    
      42		--with-extrae=/usr
    
      43
    
      44	make
    
      45}
    
      46
    
      47package() {
    
      48	cd "$srcdir/${_bundlepkgname}-${_bundlepkgver}/$pkgname-${pkgver%.*}"
    
      49
    
      50	make DESTDIR="$pkgdir/" install
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2