openresty-ldap
LOW
maintainer pelmennoteam
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from the official openresty.org source and a GitHub-hosted LDAP module; GitHub is not whitelisted but is a standard, trustworthy forge for open-source projects, and the module is used during build without remote code execution risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official openresty.org source and a GitHub-hosted LDAP module; GitHub is not whitelisted but is a standard, trustworthy forge for open-source projects, and the module is used during build without remote code execution risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
source=(https://openresty.org/download/$_pkgname-$pkgver.tar.gz{,.asc}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Danil Syromolotov <pelmennoteam@gmail.com>
2
# Base package
3
# URL: https://aur.archlinux.org/packages/openresty
4
# Maintainer: Daichi Shinozaki <dseg@shield.jp>
5
# Contributor: Jean-Sébastien Ney <jeansebastien.ney@gmail.com>
6
# Contributor: James Cleveland <jc@blackflags.co.uk>
7
# Contributor: Eimantas Bunevičius <eimantaster@gmail.com>
8
_cfgdir=/opt/openresty/nginx/conf
9
_tmpdir=/var/lib/openresty
10
_pkgname=openresty
11
pkgname=openresty-ldap
12
pkgver=1.11.2.5
13
pkgrel=1
14
pkgdesc="A Fast and Scalable Web Platform by Extending NGINX with Lua (with LDAP auth support)"
15
arch=('x86_64')
16
url="http://openresty.org/"
17
license=('BSD')
18
depends=('perl>=5.6.1' 'readline' 'pcre' 'openssl-1.0')
19
conflicts=('openresty')
20
replaces=('openresty')
21
install=$_pkgname.install
22
options=(!purge)
23
validpgpkeys=(
24
'25451EB088460026195BD62CB550E09EA0E98066'
25
)
26
27
28
source=(https://openresty.org/download/$_pkgname-$pkgver.tar.gz{,.asc}
29
service
30
$_pkgname.logrotate
31
$_pkgname.install
32
$_pkgname.sh
33
nginx-auth-ldap::git+https://github.com/kvspb/nginx-auth-ldap.git
34
)
35
noextract=()
36
sha256sums=('f8cc203e8c0fcd69676f65506a3417097fc445f57820aa8e92d7888d8ad657b9'
37
'SKIP'
38
'ec55ac7da98f5f5ec54d096c5f79b656edec0ebca835b6b9f1d20fb7be7119c5'
39
'613b0ed3fe4b5ee505ddb5122ee41604f464a5049be81c97601ee93970763a23'
40
'f071e0fd8d0d588f03fcc7db6f3cb3f7ea1b870d3416a0bde142d9aeb839d0f6'
41
'bf628aa47fb85f036f250416f13900be61dccac89736434498a80989b16ae85a'
42
'SKIP')
43
backup=(${_cfgdir:1}/fastcgi.conf
44
${_cfgdir:1}/fastcgi_params
45
${_cfgdir:1}/koi-win
46
${_cfgdir:1}/koi-utf
47
${_cfgdir:1}/mime.types
48
${_cfgdir:1}/nginx.conf
49
${_cfgdir:1}/scgi_params
50
${_cfgdir:1}/uwsgi_params
51
${_cfgdir:1}/win-utf
52
etc/logrotate.d/openresty)
53
54
build() {
55
cd "$srcdir/$_pkgname-$pkgver"
56
57
./configure \
58
--prefix=/opt/openresty \
59
--conf-path=$_cfgdir/nginx.conf \
60
--with-cc-opt="-I/usr/include/openssl-1.0/" \
61
--with-ld-opt="-L/usr/lib/openssl-1.0/" \
62
--user=http --group=http \
63
--with-file-aio \
64
--with-http_dav_module \
65
--with-http_gzip_static_module \
66
--with-http_realip_module \
67
--with-http_ssl_module \
68
--with-http_stub_status_module \
69
--with-mail \
70
--with-mail_ssl_module \
71
--with-ipv6 \
72
--with-luajit \
73
--with-pcre-jit \
74
--with-http_v2_module \
75
--with-stream \
76
--with-stream_ssl_module \
77
--with-http_iconv_module \
78
--add-module="$srcdir/nginx-auth-ldap" \
79
# --without-http_echo_module \ # disable ngx_http_echo_module
80
# --without-http_xss_module \ # disable ngx_http_xss_module
81
# --without-http_coolkit_module \ # disable ngx_http_coolkit_module
82
# --without-http_set_misc_module \ # disable ngx_http_set_misc_module
83
# --without-http_form_input_module \ # disable ngx_http_form_input_module
84
# --without-http_encrypted_session_module \
85
# \ # disable ngx_http_encrypted_session_module
86
# --without-http_srcache_module \ # disable ngx_http_srcache_module
87
# --without-http_lua_module \ # disable ngx_http_lua_module
88
# --without-http_headers_more_module \ # disable ngx_http_headers_more_module
89
# --without-http_array_var_module \ # disable ngx_http_array_var_module
90
# --without-http_memc_module \ # disable ngx_http_memc_module
91
# --without-http_redis2_module \ # disable ngx_http_redis2_module
92
# --without-http_redis_module \ # disable ngx_http_redis_module
93
# --without-http_auth_request_module \ # disable ngx_http_auth_request_module
94
# --without-http_rds_json_module \ # disable ngx_http_rds_json_module
95
# --without-http_rds_csv_module \ # disable ngx_http_rds_csv_module
96
# --without-ngx_devel_kit_module \ # disable ngx_devel_kit_module
97
# --without-http_ssl_module \ # disable ngx_http_ssl_module
98
# --with-http_iconv_module \ # enable ngx_http_iconv_module
99
# --with-http_drizzle_module \ # enable ngx_http_drizzle_module
100
# --with-http_postgres_module \ # enable ngx_http_postgres_module
101
# --without-lua_cjson \ # disable the lua-cjson library
102
# --without-lua_redis_parser \ # disable the lua-redis-parser library
103
# --without-lua_rds_parser \ # disable the lua-rds-parser library
104
# --without-lua_resty_dns \ # disable the lua-resty-dns library
105
# --without-lua_resty_memcached \ # disable the lua-resty-memcached library
106
# --without-lua_resty_redis \ # disable the lua-resty-redis library
107
# --without-lua_resty_mysql \ # disable the lua-resty-mysql library
108
# --without-lua_resty_upload \ # disable the lua-resty-upload library
109
# --without-lua_resty_string \ # disable the lua-resty-string library
110
# --without-lua51 \ # disable the bundled Lua 5.1 interpreter
111
# --with-lua51=PATH \ # specify the external installation of Lua 5.1 by PATH
112
# --with-luajit \ # enable and build LuaJIT 2.0
113
# --with-luajit=PATH \ # use the external LuaJIT 2.0 installation specified by PATH
114
# --with-luajit-xcflags=FLAGS \ # Specify extra C compiler flags for LuaJIT 2.0
115
# --with-libdrizzle=DIR \ # specify the libdrizzle 1.0 (or drizzle) installation prefix
116
# --with-libpq=DIR \ # specify the libpq (or postgresql) installation prefix
117
# --with-pg_config=PATH \ # specify the path of the pg_config utility
118
# \ # Options directly inherited from nginx
119
# --sbin-path=PATH \ # set nginx binary pathname
120
# --conf-path=PATH \ # set nginx.conf pathname
121
# --error-log-path=PATH \ # set error log pathname
122
# --pid-path=PATH \ # set nginx.pid pathname
123
# --lock-path=PATH \ # set nginx.lock pathname
124
# --tapset-prefix=PATH \ # set systemtap tapset directory prefix
125
# --stap-nginx-path=PATH \ # set stap-nginx pathname
126
# --user=USER \ # set non-privileged user for
127
# \ # worker processes
128
# --group=GROUP \ # set non-privileged group for
129
# \ # worker processes
130
# --builddir=DIR \ # set the build directory
131
# --with-rtsig_module \ # enable rtsig module
132
# --with-select_module \ # enable select module
133
# --without-select_module \ # disable select module
134
# --with-poll_module \ # enable poll module
135
# --without-poll_module \ # disable poll module
136
# --with-file-aio \ # enable file aio support
137
# --with-ipv6 \ # enable ipv6 support
138
# --with-http_realip_module \ # enable ngx_http_realip_module
139
# --with-http_addition_module \ # enable ngx_http_addition_module
140
# --with-http_xslt_module \ # enable ngx_http_xslt_module
141
# --with-http_image_filter_module \ # enable ngx_http_image_filter_module
142
# --with-http_geoip_module \ # enable ngx_http_geoip_module
143
# --with-http_sub_module \ # enable ngx_http_sub_module
144
# --with-http_dav_module \ # enable ngx_http_dav_module
145
# --with-http_flv_module \ # enable ngx_http_flv_module
146
# --with-http_gzip_static_module \ # enable ngx_http_gzip_static_module
147
# --with-http_random_index_module \ # enable ngx_http_random_index_module
148
# --with-http_secure_link_module \ # enable ngx_http_secure_link_module
149
# --with-http_degradation_module \ # enable ngx_http_degradation_module
150
# --with-http_stub_status_module \ # enable ngx_http_stub_status_module
151
# --without-http_charset_module \ # disable ngx_http_charset_module
152
# --without-http_gzip_module \ # disable ngx_http_gzip_module
153
# --without-http_ssi_module \ # disable ngx_http_ssi_module
154
# --without-http_userid_module \ # disable ngx_http_userid_module
155
# --without-http_access_module \ # disable ngx_http_access_module
156
# --without-http_auth_basic_module \ # disable ngx_http_auth_basic_module
157
# --without-http_autoindex_module \ # disable ngx_http_autoindex_module
158
# --without-http_geo_module \ # disable ngx_http_geo_module
159
# --without-http_map_module \ # disable ngx_http_map_module
160
# --without-http_split_clients_module \
161
# \ # disable ngx_http_split_clients_module
162
# --without-http_referer_module \ # disable ngx_http_referer_module
163
# --without-http_rewrite_module \ # disable ngx_http_rewrite_module
164
# --without-http_proxy_module \ # disable ngx_http_proxy_module
165
# --without-http_fastcgi_module \ # disable ngx_http_fastcgi_module
166
# --without-http_uwsgi_module \ # disable ngx_http_uwsgi_module
167
# --without-http_scgi_module \ # disable ngx_http_scgi_module
168
# --without-http_memcached_module \ # disable ngx_http_memcached_module
169
# --without-http_limit_zone_module \ # disable ngx_http_limit_zone_module
170
# --without-http_limit_req_module \ # disable ngx_http_limit_req_module
171
# --without-http_empty_gif_module \ # disable ngx_http_empty_gif_module
172
# --without-http_browser_module \ # disable ngx_http_browser_module
173
# --without-http_upstream_ip_hash_module \
174
# \ # disable ngx_http_upstream_ip_hash_module
175
# --with-http_perl_module \ # enable ngx_http_perl_module
176
# --with-perl_modules_path=PATH \ # set path to the perl modules
177
# --with-perl=PATH \ # set path to the perl binary
178
# --http-log-path=PATH \ # set path to the http access log
179
# --http-client-body-temp-path=PATH \ # set path to the http client request body
180
# \ # temporary files
181
# --http-proxy-temp-path=PATH \ # set path to the http proxy temporary files
182
# --http-fastcgi-temp-path=PATH \ # set path to the http fastcgi temporary
183
# \ # files
184
# --http-uwsgi-temp-path=PATH \ # set path to the http uwsgi temporary files
185
# --http-scgi-temp-path=PATH \ # set path to the http scgi temporary files
186
# --without-http \ # disable HTTP server
187
# --without-http-cache \ # disable HTTP cache
188
# --with-mail \ # enable POP3/IMAP4/SMTP proxy module
189
# --with-mail_ssl_module \ # enable ngx_mail_ssl_module
190
# --without-mail_pop3_module \ # disable ngx_mail_pop3_module
191
# --without-mail_imap_module \ # disable ngx_mail_imap_module
192
# --without-mail_smtp_module \ # disable ngx_mail_smtp_module
193
# --with-google_perftools_module \ # enable ngx_google_perftools_module
194
# --with-cpp_test_module \ # enable ngx_cpp_test_module
195
# --add-module=PATH \ # enable an external module
196
# --with-cc=PATH \ # set path to C compiler
197
# --with-cpp=PATH \ # set path to C preprocessor
198
# --with-cc-opt=OPTIONS \ # set additional options for C compiler
199
# --with-ld-opt=OPTIONS \ # set additional options for linker
200
# --with-cpu-opt=CPU \ # build for specified CPU, the valid values:
201
# \ # pentium, pentiumpro, pentium3, pentium4,
202
# \ # athlon, opteron, sparc32, sparc64, ppc64
203
# --with-make=PATH \ # specify the default make utility to be used
204
# --without-pcre \ # disable PCRE library usage
205
# --with-pcre \ # force PCRE library usage
206
# --with-pcre=DIR \ # set path to PCRE library sources
207
# --with-pcre-opt=OPTIONS \ # set additional options for PCRE building
208
# --with-pcre-jit \ # build PCRE with JIT compilation support
209
# --with-md5=DIR \ # set path to md5 library sources
210
# --with-md5-opt=OPTIONS \ # set additional options for md5 building
211
# --with-md5-asm \ # use md5 assembler sources
212
# --with-sha1=DIR \ # set path to sha1 library sources
213
# --with-sha1-opt=OPTIONS \ # set additional options for sha1 building
214
# --with-sha1-asm \ # use sha1 assembler sources
215
# --with-zlib=DIR \ # set path to zlib library sources
216
# --with-zlib-opt=OPTIONS \ # set additional options for zlib building
217
# --with-zlib-asm=CPU \ # use zlib assembler sources optimized
218
# \ # for specified CPU, the valid values:
219
# \ # pentium, pentiumpro
220
# --with-libatomic \ # force libatomic_ops library usage
221
# --with-libatomic=DIR \ # set path to libatomic_ops library sources
222
# --with-openssl=DIR \ # set path to OpenSSL library sources
223
# --with-openssl-opt=OPTIONS \ # set additional options for OpenSSL building
224
# --dry-run \ # dry running the configure, for testing only
225
# --platform=PLATFORM \ # forcibly specify a platform name, for testing only
226
227
make
228
}
229
230
package() {
231
cd "$srcdir/$_pkgname-$pkgver"
232
make DESTDIR="$pkgdir" install
233
install -Dm644 COPYRIGHT $pkgdir/usr/share/licenses/$_pkgname/LICENSE
234
install -d "$pkgdir"/etc/logrotate.d
235
install -m644 "$srcdir"/openresty.logrotate "$pkgdir"/etc/logrotate.d/openresty
236
install -d "$pkgdir"/$_tmpdir
237
install -Dm644 "$srcdir/service" "$pkgdir/usr/lib/systemd/system/openresty.service"
238
rm -rf "$pkgdir/var/run"
239
install -Dm755 $srcdir/$_pkgname.sh $pkgdir/etc/profile.d/$_pkgname.sh
240
}
241
# vim:set ts=2 sw=2 et:
242
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |