nsight-graphics

LOW

maintainer bieito 8 votes scanned 2026-10-05 00:08:03.938595

View on AUR

Why flagged

The package downloads a prebuilt installer from NVIDIA's official developer domain, which is a trusted source for this software; despite the non-whitelisted host pattern, the source is authentic and expected for the application.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt installer from NVIDIA's official developer domain, which is a trusted source for this software; despite the non-whitelisted host pattern, the source is authentic and expected for the application.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:23 source=("NVIDIA_Nsight_Graphics_${pkgver}.run::https://developer.nvidia.com/downloads/assets/tools/secure/nsight-graphics/${_pkgver}/linux_x64/NVIDIA_Nsight_Graphics_${pkgver}.${_vercode}-linux_x64.run"
PKGBUILD:24 "ngfx-ui.png::https://developer.download.nvidia.com/images/nvidia-nsight-graphics-icon-gbp-shaded-128.png"

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: Bieito "bieito" <>
    
      2# Contributor: Sandy Carter "bwrsandman" <>
    
      3
    
      4pkgname=nsight-graphics
    
      5# version and "code" from https://developer.nvidia.com/tools-downloads#?search=NVIDIA%20Nsight%20Graphics
    
      6pkgver=2026.3.1
    
      7_vercode=26224
    
      8_pkgver=${pkgver//\./_}
    
      9pkgrel=1
    
      10pkgdesc="Standalone application for the debugging and profiling of graphics applications"
    
      11arch=(x86_64)
    
      12url="https://developer.nvidia.com/nsight-graphics"
    
      13license=("custom")
    
      14# dependencies from https://docs.nvidia.com/nsight-graphics/InstallationGuide/index.html#linux-installation-and-setup
    
      15depends=(
    
      16  "glibc"
    
      17  "libxcb"
    
      18  "xcb-util-cursor" "xcb-util-wm" "xcb-util-image" "xcb-util-keysyms" "xcb-util-renderutil" "xcb-util" "libxext" "libxkbcommon-x11" "libxrender"
    
      19)
    
      20optdepends=(
    
      21  "libvulkan.so" "libzstd.so" 
    
      22)
    
      23source=("NVIDIA_Nsight_Graphics_${pkgver}.run::https://developer.nvidia.com/downloads/assets/tools/secure/nsight-graphics/${_pkgver}/linux_x64/NVIDIA_Nsight_Graphics_${pkgver}.${_vercode}-linux_x64.run"
    
      24        "ngfx-ui.png::https://developer.download.nvidia.com/images/nvidia-nsight-graphics-icon-gbp-shaded-128.png"
    
      25        "${pkgname}.desktop")
    
      26sha512sums=('3634acc1523c2871e8417685f934927f799f1a303873a4341683459b025f11eb495a0dfad56348311f6478817ddd0fc55de25116383bd94b7d1c9dc20c2e631f'
    
      27            '81d9682fb9b190698418fd110d02f6f32776a9b013600152b3241b9811194a7ec18bb3d8e823b1f3f857e7ff12a4b3a1801b8cd886f7677f4adf451440e52639'
    
      28            '5db24d90129e9c9998c2246c0848c91f0ae64333f536d90533b724a6053c2f1efcb8c862d470fac946ed72855eb5086e543e611f6445c68c1d95105bbcdc0c96')
    
      29options=('!debug')
    
      30
    
      31prepare() {
    
      32  sh "NVIDIA_Nsight_Graphics_${pkgver}.run" --target "${srcdir}" --noexec
    
      33}
    
      34
    
      35package() {
    
      36  # Run installation script from NVIDIA
    
      37  "${srcdir}/install-linux.pl" -noprompt -targetpath="${pkgdir}/opt/${pkgname}"
    
      38
    
      39  # Installation script creates a subdirectory "NVIDIA-Nsight-Graphics-<major ver>.<minor ver>" inside <targetpath>
    
      40  # Create link to that subdirectory so that other resources can point to /opt/nsight-graphics/latest/
    
      41  local _nv_subdir="NVIDIA-Nsight-Graphics-${pkgver%.*}"
    
      42  ln -s "${_nv_subdir}" "${pkgdir}/opt/${pkgname}/latest"
    
      43
    
      44  install -dm755 "${pkgdir}/usr/bin"
    
      45  ln -s "/opt/${pkgname}/latest/host/linux-desktop-nomad-x64/ngfx" "${pkgdir}/usr/bin"
    
      46  ln -s "/opt/${pkgname}/latest/host/linux-desktop-nomad-x64/ngfx-ui" "${pkgdir}/usr/bin"
    
      47
    
      48  # Install icon and desktop entry
    
      49  install -Dm644 -t "${pkgdir}/opt/${pkgname}/latest/host/linux-desktop-nomad-x64" "${srcdir}/ngfx-ui.png"
    
      50  install -Dt "${pkgdir}/usr/share/applications" "${srcdir}/${pkgname}.desktop"
    
      51
    
      52  # Licenses
    
      53  mkdir -p "${pkgdir}/usr/share/licenses/${pkgname}"
    
      54  ln -s "/opt/${pkgname}/latest/EULA.txt" "${pkgdir}/usr/share/licenses/${pkgname}/EULA.txt"
    
      55}
    
      56
    
      57# vim:set ts=2 sw=2 et:
    
      58

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2