nessus

MEDIUM

maintainer noraj 73 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a prebuilt RPM from a non-whitelisted but official project domain (tenable.com), which is a legitimate source for Nessus; however, the download URL includes tracking/query parameters and is not a direct static link, slightly increasing supply-chain risk if the domain were compromised.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source_x86_64=("nessus-${pkgver}-$_distro.x86_64.rpm::https://www.tenable.com/downloads/api/v1/public/pages/nessus/downloads/$_did_x86_64/download?i_agree_to_tenable_license_agreement=true")

Medium AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 95%): The package downloads a prebuilt RPM from a non-whitelisted but official project domain (tenable.com), which is a legitimate source for Nessus; however, the download URL includes tracking/query parameters and is not a direct static link, slightly increasing supply-chain risk if the domain were compromised.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: noraj <printf %s 'YWxleGFuZHJlLnphbm5pQGV1cm9wZS5jb20='|base64 -d>
    
      2# ex-Contributor: Kenneth Endfinger <kaendfinger@gmail.com>
    
      3# ex-Contributor: MattWoelk
    
      4# ex-Contributor: xsmile
    
      5
    
      6pkgname=nessus
    
      7pkgver=10.12.4
    
      8_did_x86_64=29684 # download id x86_64
    
      9_did_aarch64=29685 # download id aarch64
    
      10_distro=el9 # RHEL 9
    
      11pkgrel=1
    
      12pkgdesc="Nessus vulnerability scanner"
    
      13arch=('x86_64' 'aarch64')
    
      14depends=('gnupg')
    
      15optdepends=('java-runtime-headless: PDF report generation')
    
      16makedepends=('inetutils')
    
      17license=('custom')
    
      18url="https://www.tenable.com/downloads/nessus"
    
      19install=${pkgname}.install
    
      20source=(nessus.desktop
    
      21        nessus.sh
    
      22        LICENSE)
    
      23source_x86_64=("nessus-${pkgver}-$_distro.x86_64.rpm::https://www.tenable.com/downloads/api/v1/public/pages/nessus/downloads/$_did_x86_64/download?i_agree_to_tenable_license_agreement=true")
    
      24source_aarch64=("nessus-${pkgver}-$_distro.aarch64.rpm::https://www.tenable.com/downloads/api/v1/public/pages/nessus/downloads/$_did_aarch64/download?i_agree_to_tenable_license_agreement=true")
    
      25b2sums=('e9f6346d0c2b444c71f0673a9dd22f4298abf1ccc4500fa2db4439627844106e3d523cda976411aa243f56711b691a12ac228809cdae038371607db11a44dd61'
    
      26        'fbc6b44c6722e48b26011314d3cd2a44780ef94965db159ef1a35743e371927ec4927a9da2db9ebbb9714fc3a0a30fa4d785b23aa76e4a8a1e446a515fc1bcdd'
    
      27        '2c68d4f30686a711fbf5c77b70d9b307f9fdcc8095cea79d8c310edfeea87563d94b9106fce35fc53685e6703afb729b9d81f504a1983c367621605690ea03e1')
    
      28b2sums_x86_64=('8373c2cd581fb20048ff08cd8f875fd690a6228515b67b5d3928dcf4ed28def43dbaf8b94f05dcff03f508fb83af12d89ebdb191123ab6a0606cb38026cc18c2')
    
      29b2sums_aarch64=('690c7ce7434d42ec06d91be84a48bcedb793ffba6858573ef28588f1e714b8f15bb6a9d37f5c308072cc3411a4b9a867c5cbc87ab732e4f20988a4e017045446')
    
      30validpgpkeys=('9E53A34068D18A6E0EE45E41A021B5142F12969D')
    
      31
    
      32package() {
    
      33  install -Dm755 "$pkgname.sh" "$pkgdir/etc/profile.d/$pkgname.sh"
    
      34
    
      35  mkdir -p "$pkgdir/etc/ld.so.conf.d" "$pkgdir/usr/share" "$pkgdir/opt/${pkgname}" \
    
      36    "$pkgdir/usr/lib"
    
      37
    
      38  cp -a usr/lib "$pkgdir/usr"
    
      39
    
      40  # path to libraries
    
      41  echo "/opt/${pkgname}/lib" > "$pkgdir/etc/ld.so.conf.d/${pkgname}.conf"
    
      42
    
      43  # main files
    
      44  cp -a "opt/${pkgname}/"{bin,com,etc,lib,sbin,var} "$pkgdir/opt/${pkgname}"
    
      45
    
      46  # license
    
      47  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/${pkgname}/LICENSE"
    
      48
    
      49  # menu entry
    
      50  install -Dm644 "${srcdir}/${pkgname}.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      51}
    
      52
    
      53

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Medium	2
2026-09-16 00:03:17	Medium	2
2026-09-15 00:25:31	Medium	2
2026-09-14 00:27:57	Medium	2
2026-09-13 00:19:54	Medium	2
2026-09-12 00:25:17	Medium	2
2026-09-11 00:19:22	Medium	2
2026-09-10 00:22:44	Medium	2
2026-09-09 00:04:09	Medium	2
2026-09-08 00:18:08	Medium	2
2026-09-07 00:30:15	Medium	2
2026-09-06 00:17:06	Medium	2
2026-09-05 00:16:27	Medium	2
2026-09-04 00:03:13	Medium	2
2026-09-03 00:15:47	Medium	2
2026-09-02 00:02:31	Medium	2
2026-09-01 00:11:19	Medium	2
2026-08-31 00:19:57	Medium	2
2026-08-30 00:04:14	Medium	2
2026-08-29 00:29:17	Medium	2