nessus

maintainer noraj · 73 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt RPMs from Tenable's official download API for Nessus, a legitimate vulnerability scanner; while the host is not a standard code forge, it is the vendor's official distribution endpoint, and the downloads are integrity-verified via b2sums, making the risk low despite the non-whitelisted domain.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt RPMs from Tenable's official download API for Nessus, a legitimate vulnerability scanner; while the host is not a standard code forge, it is the vendor's official distribution endpoint, and the downloads are integrity-verified via b2sums, making the risk low despite the non-whitelisted domain.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source_x86_64=("nessus-${pkgver}-$_distro.x86_64.rpm::https://www.tenable.com/downloads/api/v1/public/pages/nessus/downloads/$_did_x86_64/download?i_agree_to_tenable_license_agreement=true")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: noraj <printf %s 'YWxleGFuZHJlLnphbm5pQGV1cm9wZS5jb20='|base64 -d>
    
      2# ex-Contributor: Kenneth Endfinger <kaendfinger@gmail.com>
    
      3# ex-Contributor: MattWoelk
    
      4# ex-Contributor: xsmile
    
      5
    
      6pkgname=nessus
    
      7pkgver=10.12.1
    
      8_did_x86_64=29147 # download id x86_64
    
      9_did_aarch64=29148 # download id aarch64
    
      10_distro=el9 # RHEL 9
    
      11pkgrel=1
    
      12pkgdesc="Nessus vulnerability scanner"
    
      13arch=('x86_64' 'aarch64')
    
      14depends=('gnupg')
    
      15optdepends=('java-runtime-headless: PDF report generation')
    
      16makedepends=('inetutils')
    
      17license=('custom')
    
      18url="https://www.tenable.com/downloads/nessus"
    
      19install=${pkgname}.install
    
      20source=(nessus.desktop
    
      21        nessus.sh
    
      22        LICENSE)
    
      23source_x86_64=("nessus-${pkgver}-$_distro.x86_64.rpm::https://www.tenable.com/downloads/api/v1/public/pages/nessus/downloads/$_did_x86_64/download?i_agree_to_tenable_license_agreement=true")
    
      24source_aarch64=("nessus-${pkgver}-$_distro.aarch64.rpm::https://www.tenable.com/downloads/api/v1/public/pages/nessus/downloads/$_did_aarch64/download?i_agree_to_tenable_license_agreement=true")
    
      25b2sums=('e9f6346d0c2b444c71f0673a9dd22f4298abf1ccc4500fa2db4439627844106e3d523cda976411aa243f56711b691a12ac228809cdae038371607db11a44dd61'
    
      26        'fbc6b44c6722e48b26011314d3cd2a44780ef94965db159ef1a35743e371927ec4927a9da2db9ebbb9714fc3a0a30fa4d785b23aa76e4a8a1e446a515fc1bcdd'
    
      27        '2c68d4f30686a711fbf5c77b70d9b307f9fdcc8095cea79d8c310edfeea87563d94b9106fce35fc53685e6703afb729b9d81f504a1983c367621605690ea03e1')
    
      28b2sums_x86_64=('a6fafcad55fdf860bc91e9abb1d6e1e519986c5638e5c5529967cfc341ca80bb0c980274f347d7f074b0f5786f580a0b441f4cc24e57746a5fc31b7e8e33bc43')
    
      29b2sums_aarch64=('be588bce80ddc57068b225c99161bc870197f4f421e1ba416d71822db97e63c007ec1aeb11606409d9a15b7facfdcea3eb9990fbea9587f3350ae738b9891695')
    
      30validpgpkeys=('9E53A34068D18A6E0EE45E41A021B5142F12969D')
    
      31
    
      32package() {
    
      33  install -Dm755 "$pkgname.sh" "$pkgdir/etc/profile.d/$pkgname.sh"
    
      34
    
      35  mkdir -p "$pkgdir/etc/ld.so.conf.d" "$pkgdir/usr/share" "$pkgdir/opt/${pkgname}" \
    
      36    "$pkgdir/usr/lib"
    
      37
    
      38  cp -a usr/lib "$pkgdir/usr"
    
      39
    
      40  # path to libraries
    
      41  echo "/opt/${pkgname}/lib" > "$pkgdir/etc/ld.so.conf.d/${pkgname}.conf"
    
      42
    
      43  # main files
    
      44  cp -a "opt/${pkgname}/"{bin,com,etc,lib,sbin,var} "$pkgdir/opt/${pkgname}"
    
      45
    
      46  # license
    
      47  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/${pkgname}/LICENSE"
    
      48
    
      49  # menu entry
    
      50  install -Dm644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      51}
    
      52
    
      53

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-03 00:08
@@ -4,14 +4,15 @@
 # ex-Contributor: xsmile
 
 pkgname=nessus
-pkgver=10.12.0
-_did_x86_64=28545 # download id x86_64
-_did_aarch64=28546 # download id aarch64
+pkgver=10.12.1
+_did_x86_64=29147 # download id x86_64
+_did_aarch64=29148 # download id aarch64
 _distro=el9 # RHEL 9
 pkgrel=1
 pkgdesc="Nessus vulnerability scanner"
 arch=('x86_64' 'aarch64')
 depends=('gnupg')
+optdepends=('java-runtime-headless: PDF report generation')
 makedepends=('inetutils')
 license=('custom')
 url="https://www.tenable.com/downloads/nessus"
@@ -24,8 +25,8 @@
 b2sums=('e9f6346d0c2b444c71f0673a9dd22f4298abf1ccc4500fa2db4439627844106e3d523cda976411aa243f56711b691a12ac228809cdae038371607db11a44dd61'
         'fbc6b44c6722e48b26011314d3cd2a44780ef94965db159ef1a35743e371927ec4927a9da2db9ebbb9714fc3a0a30fa4d785b23aa76e4a8a1e446a515fc1bcdd'
         '2c68d4f30686a711fbf5c77b70d9b307f9fdcc8095cea79d8c310edfeea87563d94b9106fce35fc53685e6703afb729b9d81f504a1983c367621605690ea03e1')
-b2sums_x86_64=('32de6a86e192ba2874d8a77552a66dc49a7c8a81ed861c40ecfff0be63deb808ab4f99ba9453d4ba63a0858d0e9b680cbadb7ce2fc4bd5b8efe1c78c712a59cb')
-b2sums_aarch64=('1de4edc7299918afac70ba3c63af8c3b04d0460baccc149b0fbf554dfa50a6e18851b47cf27e093de595bac2a87defff77164b6d879c668c74cf2a44d8c357b1')
+b2sums_x86_64=('a6fafcad55fdf860bc91e9abb1d6e1e519986c5638e5c5529967cfc341ca80bb0c980274f347d7f074b0f5786f580a0b441f4cc24e57746a5fc31b7e8e33bc43')
+b2sums_aarch64=('be588bce80ddc57068b225c99161bc870197f4f421e1ba416d71822db97e63c007ec1aeb11606409d9a15b7facfdcea3eb9990fbea9587f3350ae738b9891695')
 validpgpkeys=('9E53A34068D18A6E0EE45E41A021B5142F12969D')
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 21:14:52	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1