openresty
MEDIUM
maintainer kimbrandt
37 votes
scanned 2026-10-27 09:47:05.186512
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
source=(https://openresty.org/download/$pkgname-$pkgver.tar.gz{,.asc}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Kim Brandt <myrveln@gmail.com>
2
# Contributor: Daichi Shinozaki <dseg@shield.jp>
3
# Contributor: Jean-Sébastien Ney <jeansebastien.ney@gmail.com>
4
# Contributor: James Cleveland <jc@blackflags.co.uk>
5
# Contributor: Eimantas Bunevičius <eimantaster@gmail.com>
6
_cfgdir=/etc/openresty
7
_logdir=/var/log/openresty
8
pkgname=openresty
9
pkgver=1.31.8.1
10
pkgrel=1
11
pkgdesc="A Fast and Scalable Web Platform by Extending NGINX with Lua"
12
arch=('x86_64' 'armv6h')
13
url="https://openresty.org/"
14
license=('BSD-2-Clause')
15
depends=('perl>=5.6.1' 'readline' 'pcre')
16
makedepends=('geoip')
17
optdepends=('geoip: GeoIP HTTP and stream modules')
18
install=$pkgname.install
19
options=(!purge)
20
validpgpkeys=(
21
'25451EB088460026195BD62CB550E09EA0E98066'
22
)
23
24
source=(https://openresty.org/download/$pkgname-$pkgver.tar.gz{,.asc}
25
service
26
$pkgname.logrotate
27
$pkgname.install
28
$pkgname.sh
29
nginx.conf
30
nginx.vh.default.conf
31
)
32
sha256sums=('b569c63b420f80a4ac8466f2deffe73ed93ab760026532e039c3658409a997f4'
33
'SKIP'
34
'67dedde2ca4c660f856641522bae70b856ee30ddeb08c14fdaff37ac22ab6b5c'
35
'ba158bbf82d3479a99215457e7ac6d1e4dc3548d9f92f7c240634df7215d85e9'
36
'037e04e77de171a3d7dd709c40b138ec9b44a20a6f274266d98e53863cfb7250'
37
'bf628aa47fb85f036f250416f13900be61dccac89736434498a80989b16ae85a'
38
'ba90b0afde3d6ed13232289d4dd66d6232e1dc6d884aa79921ef797f6a38d1eb'
39
'2981bdc8401f7061a300589869e6ac85ff75ae4f4542329de150b058bd7c0661')
40
backup=(${_cfgdir:1}/fastcgi.conf
41
${_cfgdir:1}/fastcgi_params
42
${_cfgdir:1}/koi-win
43
${_cfgdir:1}/koi-utf
44
${_cfgdir:1}/mime.types
45
${_cfgdir:1}/nginx.conf
46
${_cfgdir:1}/scgi_params
47
${_cfgdir:1}/uwsgi_params
48
${_cfgdir:1}/win-utf
49
etc/logrotate.d/openresty
50
etc/openresty/conf.d/default.conf)
51
52
build() {
53
cd "$srcdir/$pkgname-$pkgver"
54
55
./configure \
56
--prefix=/opt/openresty \
57
--conf-path=$_cfgdir/nginx.conf \
58
--pid-path=/run/openresty/nginx.pid \
59
--http-log-path=$_logdir/access.log \
60
--error-log-path=$_logdir/error.log \
61
--user=http --group=http \
62
--with-compat \
63
--with-threads \
64
--with-file-aio \
65
--with-http_addition_module \
66
--with-http_auth_request_module \
67
--with-http_dav_module \
68
--with-http_flv_module \
69
--with-http_geoip_module=dynamic \
70
--with-http_gunzip_module \
71
--with-http_gzip_static_module \
72
--with-http_mp4_module \
73
--with-http_random_index_module \
74
--with-http_realip_module \
75
--with-http_secure_link_module \
76
--with-http_slice_module \
77
--with-http_ssl_module \
78
--with-http_stub_status_module \
79
--with-http_sub_module \
80
--with-http_v2_module \
81
--with-http_v3_module \
82
--with-http_iconv_module \
83
--with-luajit \
84
--with-pcre-jit \
85
--with-stream_ssl_module \
86
--with-stream_ssl_preread_module \
87
--without-http_rds_json_module \
88
--without-http_rds_csv_module \
89
--without-lua_rds_parser \
90
--without-mail_pop3_module \
91
--without-mail_imap_module \
92
--without-mail_smtp_module \
93
# Complete set of configure options
94
#
95
# OpenResty build options
96
# --with-debug \ # enable debug logging
97
# --with-no-pool-patch \ # enable no-pool patch for debugging memory issues
98
#
99
# Lua library options
100
# --without-lua_cjson \ # disable the lua-cjson library
101
# --without-lua_tablepool \ # disable the lua-tablepool library (and by consequence, lua-resty-shell)
102
# --without-lua_redis_parser \ # disable the lua-redis-parser library
103
# --without-lua_rds_parser \ # disable the lua-rds-parser library
104
# --without-lua_resty_dns \ # disable the lua-resty-dns library
105
# --without-lua_resty_memcached \ # disable the lua-resty-memcached library
106
# --without-lua_resty_redis \ # disable the lua-resty-redis library
107
# --without-lua_resty_mysql \ # disable the lua-resty-mysql library
108
# --without-lua_resty_upload \ # disable the lua-resty-upload library
109
# --without-lua_resty_upstream_healthcheck \
110
# \ # disable the lua-resty-upstream-healthcheck library
111
# --without-lua_resty_string \ # disable the lua-resty-string library
112
# --without-lua_resty_websocket \ # disable the lua-resty-websocket library
113
# --without-lua_resty_limit_traffic \ # disable the lua-resty-limit-traffic library
114
# --without-lua_resty_lock \ # disable the lua-resty-lock library
115
# --without-lua_resty_lrucache \ # disable the lua-resty-lrucache library
116
# --without-lua_resty_signal \ # disable the lua-resty-signal library (and by consequence, lua-resty-shell)
117
# --without-lua_resty_shell \ # disable the lua-resty-shell library
118
# --without-lua_resty_core \ # disable the lua-resty-core library
119
# --without-lua_resty_rsa \ # disable the lua-resty-rsa library
120
# --without-lua_resty_openssl \ # disable the lua-resty-openssl library
121
#
122
# LuaJIT options
123
# --with-luajit=DIR \ # use the external LuaJIT 2.1 installation specified by DIR
124
# --with-luajit-xcflags=FLAGS \ # specify extra C compiler flags for LuaJIT 2.1
125
# --with-luajit-ldflags=FLAGS \ # specify extra C linker flags for LuaJIT 2.1
126
# --without-luajit-lua52 \ # turns off the LuaJIT extensions from Lua 5.2 that may break
127
# \ # backward compatibility
128
# --without-luajit-gc64 \ # turns off the LuaJIT GC64 mode (enabled by default on x86_64)
129
#
130
# OpenResty nginx modules (disabled by default, enable with --with-*)
131
# --with-http_iconv_module \ # enable ngx_http_iconv_module
132
# --with-http_drizzle_module \ # enable ngx_http_drizzle_module (requires --with-libdrizzle=DIR)
133
# --with-http_postgres_module \ # enable ngx_http_postgres_module (requires --with-libpq=DIR or --with-pg_config=PATH)
134
#
135
# OpenResty nginx modules (enabled by default, disable with --without-*)
136
# --without-ngx_devel_kit_module \ # disable ngx_devel_kit_module
137
# --without-http_echo_module \ # disable ngx_http_echo_module
138
# --without-http_xss_module \ # disable ngx_http_xss_module
139
# --without-http_coolkit_module \ # disable ngx_http_coolkit_module
140
# --without-http_set_misc_module \ # disable ngx_http_set_misc_module
141
# --without-http_form_input_module \ # disable ngx_http_form_input_module
142
# --without-http_encrypted_session_module \
143
# \ # disable ngx_http_encrypted_session_module
144
# --without-http_srcache_module \ # disable ngx_http_srcache_module
145
# --without-http_lua_module \ # disable ngx_http_lua_module
146
# --without-http_lua_upstream_module \ # disable ngx_http_lua_upstream_module
147
# --without-http_headers_more_module \ # disable ngx_http_headers_more_module
148
# --without-http_array_var_module \ # disable ngx_http_array_var_module
149
# --without-http_memc_module \ # disable ngx_http_memc_module
150
# --without-http_redis2_module \ # disable ngx_http_redis2_module
151
# --without-http_redis_module \ # disable ngx_http_redis_module
152
# --without-http_rds_json_module \ # disable ngx_http_rds_json_module
153
# --without-http_rds_csv_module \ # disable ngx_http_rds_csv_module
154
# --without-stream_lua_module \ # disable ngx_stream_lua_module
155
#
156
# Third-party database options
157
# --with-libdrizzle=DIR \ # specify the libdrizzle 1.0 (or drizzle) installation prefix
158
# --with-libpq=DIR \ # specify the libpq (or postgresql) installation prefix
159
# --with-pg_config=PATH \ # specify the path of the pg_config utility
160
#
161
# Options directly inherited from nginx
162
# --sbin-path=PATH \ # set nginx binary pathname
163
# --modules-path=PATH \ # set modules path
164
# --conf-path=PATH \ # set nginx.conf pathname
165
# --error-log-path=PATH \ # set error log pathname
166
# --pid-path=PATH \ # set nginx.pid pathname
167
# --lock-path=PATH \ # set nginx.lock pathname
168
# --tapset-prefix=PATH \ # set systemtap tapset directory prefix
169
# --stap-nginx-path=PATH \ # set stap-nginx pathname
170
# --user=USER \ # set non-privileged user for worker processes
171
# --group=GROUP \ # set non-privileged group for worker processes
172
# --build=NAME \ # set build name
173
# --builddir=DIR \ # set build directory
174
# --with-select_module \ # enable select module
175
# --without-select_module \ # disable select module
176
# --with-poll_module \ # enable poll module
177
# --without-poll_module \ # disable poll module
178
# --with-threads \ # enable thread pool support
179
# --with-file-aio \ # enable file AIO support
180
# --with-http_v2_module \ # enable ngx_http_v2_module
181
# --with-http_v3_module \ # enable ngx_http_v3_module
182
# --with-http_realip_module \ # enable ngx_http_realip_module
183
# --with-http_addition_module \ # enable ngx_http_addition_module
184
# --with-http_xslt_module \ # enable ngx_http_xslt_module
185
# --with-http_xslt_module=dynamic \ # enable dynamic ngx_http_xslt_module
186
# --with-http_image_filter_module \ # enable ngx_http_image_filter_module (requires libgd from AUR)
187
# --with-http_image_filter_module=dynamic \
188
# \ # enable dynamic ngx_http_image_filter_module (requires libgd from AUR)
189
# --with-http_geoip_module \ # enable ngx_http_geoip_module
190
# --with-http_geoip_module=dynamic \ # enable dynamic ngx_http_geoip_module
191
# --with-http_sub_module \ # enable ngx_http_sub_module
192
# --with-http_dav_module \ # enable ngx_http_dav_module
193
# --with-http_flv_module \ # enable ngx_http_flv_module
194
# --with-http_mp4_module \ # enable ngx_http_mp4_module
195
# --with-http_gunzip_module \ # enable ngx_http_gunzip_module
196
# --with-http_gzip_static_module \ # enable ngx_http_gzip_static_module
197
# --with-http_auth_request_module \ # enable ngx_http_auth_request_module
198
# --with-http_random_index_module \ # enable ngx_http_random_index_module
199
# --with-http_secure_link_module \ # enable ngx_http_secure_link_module
200
# --with-http_degradation_module \ # enable ngx_http_degradation_module
201
# --with-http_slice_module \ # enable ngx_http_slice_module
202
# --with-http_stub_status_module \ # enable ngx_http_stub_status_module
203
# --with-http_perl_module \ # enable ngx_http_perl_module
204
# --with-http_perl_module=dynamic \ # enable dynamic ngx_http_perl_module
205
# --with-perl_modules_path=PATH \ # set Perl modules path
206
# --with-perl=PATH \ # set perl binary pathname
207
# --http-log-path=PATH \ # set http access log pathname
208
# --http-client-body-temp-path=PATH \ # set path to store http client request body temporary files
209
# --http-proxy-temp-path=PATH \ # set path to store http proxy temporary files
210
# --http-fastcgi-temp-path=PATH \ # set path to store http fastcgi temporary files
211
# --http-uwsgi-temp-path=PATH \ # set path to store http uwsgi temporary files
212
# --http-scgi-temp-path=PATH \ # set path to store http scgi temporary files
213
# --without-http \ # disable HTTP server
214
# --without-http-cache \ # disable HTTP cache
215
# --without-http_charset_module \ # disable ngx_http_charset_module
216
# --without-http_gzip_module \ # disable ngx_http_gzip_module
217
# --without-http_ssi_module \ # disable ngx_http_ssi_module
218
# --without-http_userid_module \ # disable ngx_http_userid_module
219
# --without-http_access_module \ # disable ngx_http_access_module
220
# --without-http_auth_basic_module \ # disable ngx_http_auth_basic_module
221
# --without-http_mirror_module \ # disable ngx_http_mirror_module
222
# --without-http_autoindex_module \ # disable ngx_http_autoindex_module
223
# --without-http_geo_module \ # disable ngx_http_geo_module
224
# --without-http_map_module \ # disable ngx_http_map_module
225
# --without-http_split_clients_module \ # disable ngx_http_split_clients_module
226
# --without-http_referer_module \ # disable ngx_http_referer_module
227
# --without-http_rewrite_module \ # disable ngx_http_rewrite_module
228
# --without-http_proxy_module \ # disable ngx_http_proxy_module
229
# --without-http_fastcgi_module \ # disable ngx_http_fastcgi_module
230
# --without-http_uwsgi_module \ # disable ngx_http_uwsgi_module
231
# --without-http_scgi_module \ # disable ngx_http_scgi_module
232
# --without-http_grpc_module \ # disable ngx_http_grpc_module
233
# --without-http_memcached_module \ # disable ngx_http_memcached_module
234
# --without-http_limit_conn_module \ # disable ngx_http_limit_conn_module
235
# --without-http_limit_req_module \ # disable ngx_http_limit_req_module
236
# --without-http_empty_gif_module \ # disable ngx_http_empty_gif_module
237
# --without-http_browser_module \ # disable ngx_http_browser_module
238
# --without-http_upstream_hash_module \ # disable ngx_http_upstream_hash_module
239
# --without-http_upstream_ip_hash_module \
240
# \ # disable ngx_http_upstream_ip_hash_module
241
# --without-http_upstream_least_conn_module \
242
# \ # disable ngx_http_upstream_least_conn_module
243
# --without-http_upstream_random_module \
244
# \ # disable ngx_http_upstream_random_module
245
# --without-http_upstream_keepalive_module \
246
# \ # disable ngx_http_upstream_keepalive_module
247
# --without-http_upstream_zone_module \ # disable ngx_http_upstream_zone_module
248
# --with-mail \ # enable POP3/IMAP4/SMTP proxy module
249
# --with-mail=dynamic \ # enable dynamic POP3/IMAP4/SMTP proxy module
250
# --with-mail_ssl_module \ # enable ngx_mail_ssl_module
251
# --without-mail_pop3_module \ # disable ngx_mail_pop3_module
252
# --without-mail_imap_module \ # disable ngx_mail_imap_module
253
# --without-mail_smtp_module \ # disable ngx_mail_smtp_module
254
# --with-stream \ # enable TCP/UDP proxy module
255
# --with-stream=dynamic \ # enable dynamic TCP/UDP proxy module
256
# --with-stream_ssl_module \ # enable ngx_stream_ssl_module
257
# --with-stream_realip_module \ # enable ngx_stream_realip_module
258
# --with-stream_geoip_module \ # enable ngx_stream_geoip_module
259
# --with-stream_geoip_module=dynamic \ # enable dynamic ngx_stream_geoip_module
260
# --with-stream_ssl_preread_module \ # enable ngx_stream_ssl_preread_module
261
# --without-stream_limit_conn_module \ # disable ngx_stream_limit_conn_module
262
# --without-stream_access_module \ # disable ngx_stream_access_module
263
# --without-stream_geo_module \ # disable ngx_stream_geo_module
264
# --without-stream_map_module \ # disable ngx_stream_map_module
265
# --without-stream_split_clients_module \
266
# \ # disable ngx_stream_split_clients_module
267
# --without-stream_return_module \ # disable ngx_stream_return_module
268
# --without-stream_upstream_hash_module \
269
# \ # disable ngx_stream_upstream_hash_module
270
# --without-stream_upstream_least_conn_module \
271
# \ # disable ngx_stream_upstream_least_conn_module
272
# --without-stream_upstream_random_module \
273
# \ # disable ngx_stream_upstream_random_module
274
# --without-stream_upstream_zone_module \
275
# \ # disable ngx_stream_upstream_zone_module
276
# --with-google_perftools_module \ # enable ngx_google_perftools_module
277
# --with-cpp_test_module \ # enable ngx_cpp_test_module
278
# --add-module=PATH \ # enable external module
279
# --add-dynamic-module=PATH \ # enable dynamic external module
280
# --with-compat \ # dynamic modules compatibility
281
# --with-cc=PATH \ # set C compiler pathname
282
# --with-cpp=PATH \ # set C preprocessor pathname
283
# --with-cc-opt=OPTIONS \ # set additional C compiler options
284
# --with-ld-opt=OPTIONS \ # set additional linker options
285
# --with-cpu-opt=CPU \ # build for the specified CPU, valid values:
286
# \ # pentium, pentiumpro, pentium3, pentium4,
287
# \ # athlon, opteron, sparc32, sparc64, ppc64
288
# --without-pcre \ # disable PCRE library usage
289
# --without-pcre2 \ # do not use PCRE2 library
290
# --with-pcre \ # force PCRE library usage
291
# --with-pcre=DIR \ # set path to PCRE library sources
292
# --with-pcre-opt=OPTIONS \ # set additional build options for PCRE
293
# --with-pcre-jit \ # build PCRE with JIT compilation support
294
# --with-zlib=DIR \ # set path to zlib library sources
295
# --with-zlib-opt=OPTIONS \ # set additional build options for zlib
296
# --with-zlib-asm=CPU \ # use zlib assembler sources optimized
297
# \ # for the specified CPU, valid values:
298
# \ # pentium, pentiumpro
299
# --with-libatomic \ # force libatomic_ops library usage
300
# --with-libatomic=DIR \ # set path to libatomic_ops library sources
301
# --with-openssl=DIR \ # set path to OpenSSL library sources
302
# --with-openssl-opt=OPTIONS \ # set additional build options for OpenSSL
303
# --dry-run \ # dry running the configure, for testing only
304
# --platform=PLATFORM \ # forcibly specify a platform name, for testing only
305
306
make
307
}
308
309
package() {
310
cd "$srcdir/$pkgname-$pkgver"
311
make DESTDIR="$pkgdir" install
312
install -Dm644 COPYRIGHT "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
313
314
install -Dm644 "$srcdir/nginx.conf" "$pkgdir/$_cfgdir/nginx.conf"
315
316
install -Dm644 "$srcdir/nginx.vh.default.conf" "$pkgdir/$_cfgdir/conf.d/default.conf"
317
318
install -d "$pkgdir"/etc/logrotate.d
319
install -m644 "$srcdir/openresty.logrotate" "$pkgdir/etc/logrotate.d/openresty"
320
321
install -dm755 "$pkgdir/$_logdir"
322
323
install -Dm644 "$srcdir/service" "$pkgdir/usr/lib/systemd/system/openresty.service"
324
rm -rf "$pkgdir/var/run"
325
install -Dm755 "$srcdir/$pkgname.sh" "$pkgdir/etc/profile.d/$pkgname.sh"
326
}
327
# vim:set ts=2 sw=2 et:
328
Changes since previous scan
--- PKGBUILD @ 2026-08-13 00:17+++ PKGBUILD @ 2026-10-27 09:47@@ -6,8 +6,8 @@ _cfgdir=/etc/openresty _logdir=/var/log/openresty pkgname=openresty-pkgver=1.31.1.1-pkgrel=2+pkgver=1.31.8.1+pkgrel=1 pkgdesc="A Fast and Scalable Web Platform by Extending NGINX with Lua" arch=('x86_64' 'armv6h') url="https://openresty.org/"@@ -29,7 +29,7 @@ nginx.conf nginx.vh.default.conf )-sha256sums=('65b78baadd3f0984055de89bf13f4a1932e5bfe9c31932037a134ea2b1a0ce42'+sha256sums=('b569c63b420f80a4ac8466f2deffe73ed93ab760026532e039c3658409a997f4' 'SKIP' '67dedde2ca4c660f856641522bae70b856ee30ddeb08c14fdaff37ac22ab6b5c' 'ba158bbf82d3479a99215457e7ac6d1e4dc3548d9f92f7c240634df7215d85e9'Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-27 09:47:05 | Medium | 1 |
| 2026-08-13 00:17:07 | Clean | 2 |
| 2026-08-12 09:23:17 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 17:53:10 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |