openvox-server
LOW
maintainer lb.laboon
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from a project-associated domain (artifacts.voxpupuli.org) used to build the software; it is not an unverifiable prebuilt binary, and the host, while not standard, is plausibly official for the project.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from a project-associated domain (artifacts.voxpupuli.org) used to build the software; it is not an unverifiable prebuilt binary, and the host, while not standard, is plausibly official for the project.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:29
source=("${pkgname}-${pkgver}.tar.gz::https://artifacts.voxpupuli.org/${pkgname}/${pkgver}/${pkgname}-${pkgver}.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer : L. Bradley LaBoon <brad@laboon.io>
2
# Contributor: Christian Rebischke <chris.rebischke[at]archlinux[dot]org>
3
# Contributor: Jonathan Steel <jsteel at archlinux.org>
4
# Contributor: Niels Abspoel <aboe76 (at) Gmail (dot) com>
5
6
pkgname=openvox-server
7
pkgver=8.15.2
8
pkgrel=1
9
pkgdesc='Server automation framework and application'
10
arch=('any')
11
url='https://github.com/OpenVoxProject/openvox-server'
12
license=('APACHE')
13
depends=('ruby' 'puppet>=6' 'java-runtime-headless=21' 'logrotate' 'jruby'
14
'openfact' 'net-tools')
15
conflicts=('puppetserver')
16
provides=('puppetserver')
17
backup=('etc/default/puppetserver'
18
'etc/logrotate.d/puppetserver'
19
'etc/puppetlabs/puppetserver/conf.d/auth.conf'
20
'etc/puppetlabs/puppetserver/conf.d/global.conf'
21
'etc/puppetlabs/puppetserver/conf.d/puppetserver.conf'
22
'etc/puppetlabs/puppetserver/conf.d/web-routes.conf'
23
'etc/puppetlabs/puppetserver/conf.d/webserver.conf'
24
'etc/puppetlabs/puppetserver/logback.xml'
25
'etc/puppetlabs/puppetserver/request-logging.xml'
26
'etc/puppetlabs/puppetserver/services.d/ca.cfg')
27
install="${pkgname}.install"
28
_hiera_eyaml_ver=5.0.1
29
source=("${pkgname}-${pkgver}.tar.gz::https://artifacts.voxpupuli.org/${pkgname}/${pkgver}/${pkgname}-${pkgver}.tar.gz")
30
sha512sums=('d6608696ca642e0dd2c33a35ae6d4c55ceb8c7eefdcdbcebb0ed6cd7e892dfe5fe049649fe5166f8ac601f6eeb6116eeefc8d4dc96ae81a751116bc0f05dd177')
31
32
prepare() {
33
cd "puppetserver-${pkgver}"
34
35
echo "hiera-eyaml ${_hiera_eyaml_ver}" >> ext/build-scripts/jruby-gem-list.txt
36
sed -i 's:sysconfig:default:' ext/redhat/puppetserver.service
37
sed -i "s:\[/opt/puppetlabs/puppet/lib/ruby/vendor_ruby\]:\[$( ruby -e \
38
'puts RbConfig::CONFIG["vendorlibdir"]' ),$( ruby -e \
39
'puts Gem.default_dir' )/gems/openfact-$( facter -v )/lib\]:" \
40
"ext/config/conf.d/puppetserver.conf"
41
sed -i "s:/opt/puppetlabs/puppet/lib/ruby/vendor_gems:$( ruby -e \
42
'puts Gem.default_dir' ):" \
43
ext/build-scripts/install-vendored-gems.sh
44
sed -i 's:#!/opt/.*/ruby:#!/usr/bin/ruby:' ext/cli/ca
45
}
46
47
package() {
48
cd "puppetserver-${pkgver}"
49
50
_prefix=${_prefix:=/usr}
51
_unitdir=${_unitdir:=/usr/lib/systemd/system}
52
_real_name=${_real_name:=puppetserver}
53
_confdir=${_confdir:=/etc}
54
_sysconfdir=/etc
55
_app_bindir=${_bindir:=/opt/puppetlabs/server/apps/${_real_name}/bin}
56
_sym_bindir=${_symbindir:=/opt/puppetlabs/server/bin}
57
_app_prefix=${_app_prefix:=/opt/puppetlabs/server/apps/${_real_name}}
58
_app_data=${_app_data:=/opt/puppetlabs/server/data/${_real_name}}
59
_app_logdir=${_app_logdir:=/var/log/puppetlabs/${_real_name}}
60
61
env EZ_VERBOSE=1 DESTDIR="${pkgdir}" prefix=${_prefix} \
62
app_prefix=${_app_prefix} app_data=${_app_data} \
63
confdir=${_sysconfdir} bindir=${_app_bindir} symbindir=${_sym_bindir} \
64
rundir=${_app_rundir} \
65
bash install.sh install_redhat
66
67
env EZ_VERBOSE=1 DESTDIR="${pkgdir}" prefix=${_prefix} \
68
app_prefix=${_app_prefix} app_data=${_app_data} \
69
confdir=${_sysconfdir} bindir=${_app_bindir} \
70
symbindir=${_sym_bindir} rundir=${_app_rundir} \
71
defaultsdir=${_sysconfdir}/default unitdir=${_unitdir} \
72
bash install.sh systemd_redhat
73
74
env EZ_VERBOSE=1 DESTDIR="${pkgdir}" confdir=${_sysconfdir} \
75
bash install.sh logrotate
76
77
install -d -m 0755 "${pkgdir}/usr/bin"
78
ln -s "${_symbindir}/${_real_name}" "${pkgdir}/usr/bin/${_real_name}"
79
install -d "${pkgdir}"/opt/puppetlabs/server/data/puppetserver/jruby-gems
80
rm -r "${pkgdir}"/var/run
81
sed -i 's/\/var\/run/\/run/g' "${pkgdir}/usr/lib/tmpfiles.d/puppetserver.conf"
82
}
83
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |