openvpn-auth-oauth2
LOW
maintainer k0ste
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a tarball from GitHub via codeload.github.com, which is a legitimate project-owned host; building from official project sources is normal AUR packaging practice, and the checksum is verified.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from GitHub via codeload.github.com, which is a legitimate project-owned host; building from official project sources is normal AUR packaging practice, and the checksum is verified.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/${pkgname}/tar.gz/refs/tags/v${pkgver}")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Shalygin Konstantin <k0ste@k0ste.ru>
2
# Contributor: Shalygin Konstantin <k0ste@k0ste.ru>
3
4
pkgname='openvpn-auth-oauth2'
5
pkgver='2.2.3'
6
pkgrel='1'
7
pkgdesc='A Plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows'
8
arch=('x86_64' 'aarch64')
9
_uri="github.com/jkroepke"
10
url="https://${_uri}/${pkgname}"
11
license=('MIT')
12
makedepends=('go' 'git')
13
depends=('openvpn>=2.6.2')
14
source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/${pkgname}/tar.gz/refs/tags/v${pkgver}")
15
sha256sums=('40883cd46ce0c1df9e52ebda75afcc038596dc20e4e850fed8139d53b7634875')
16
backup=("etc/conf.d/${pkgname}"
17
"etc/${pkgname}/config.yaml")
18
19
prepare() {
20
export GOPATH="${srcdir}/gopath"
21
export GOBIN="${GOPATH}/bin"
22
export GOTMPDIR="${GOPATH}/tmp"
23
export GOCACHE="${srcdir}/cache/go-cache"
24
export GOMODCACHE="${srcdir}/cache/go"
25
mkdir -p "${GOPATH}/src/${_uri}"
26
mkdir -p "${GOTMPDIR}"
27
eval "$(go env | grep -e "GOHOSTOS" -e "GOHOSTARCH")"
28
ln -snf "${srcdir}/${pkgname}-${pkgver}" "${GOPATH}/src/${_uri}/${pkgname}"
29
30
sed --in-place \
31
--expression 's|/etc/sysconfig|/etc/conf.d|g' \
32
--expression 's|CapabilityBoundingSet=|CapabilityBoundingSet=CAP_NET_BIND_SERVICE|g' \
33
--expression 's|AmbientCapabilities=|AmbientCapabilities=CAP_NET_BIND_SERVICE|g' \
34
--expression '/PrivateUsers=true/d' \
35
"${pkgname}-${pkgver}/packaging/usr/lib/systemd/system/${pkgname}.service"
36
}
37
38
build() {
39
cd "${GOPATH}/src/${_uri}/${pkgname}"
40
export CGO_CFLAGS="${CFLAGS} ${DEBUG_CFLAGS}"
41
export CGO_LDFLAGS="${LDFLAGS}"
42
export CGO_CPPFLAGS="${CPPFLAGS}"
43
export CGO_CXXFLAGS="${CXXFLAGS} ${DEBUG_CXXFLAGS}"
44
45
for e in "cmd" "lib"
46
do
47
48
if [[ "${e}" == "lib" ]]
49
then
50
mode="c-shared"
51
outname="${pkgname}.so"
52
else
53
mode="pie"
54
outname="${pkgname}"
55
fi
56
57
GOOS="${GOHOSTOS}" GOARCH="${GOHOSTARCH}" \
58
BUILDTAGS="no_otel" go build \
59
-buildmode="${mode}" \
60
-trimpath \
61
-mod="readonly" \
62
-modcacherw \
63
-ldflags "-compressdwarf=false -linkmode external -extldflags '${LDFLAGS}' \
64
-X ${_uri}/${pkgname}/internal/version.Version=${pkgver} \
65
-X ${_uri}/${pkgname}/internal/version.Commit=$(git rev-parse HEAD) \
66
-X ${_uri}/${pkgname}/internal/version.Date=$(date -u '+%Y%m%d-%H:%M:%S' --date=@${SOURCE_DATE_EPOCH})" \
67
-o "${outname}" \
68
"./${e}/${pkgname}"
69
done
70
}
71
72
check() {
73
cd "${GOPATH}/src/${_uri}/${pkgname}"
74
TMPDIR="${GOPATH}/tmp" go test -modcacherw -race ./...
75
}
76
77
package() {
78
cd "${pkgname}-${pkgver}"
79
install -Dm0644 "LICENSE.txt" -t "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
80
install -Dm0755 "${pkgname}" -t "${pkgdir}/usr/bin"
81
install -Dm0755 "${pkgname}.so" -t "${pkgdir}/usr/lib/openvpn/plugins"
82
install -Dm0644 "${pkgname}.h" -t "${pkgdir}/usr/include"
83
84
pushd "packaging"
85
install -Dm0644 "etc/${pkgname}/config.yaml" -t "${pkgdir}/etc/${pkgname}"
86
install -Dm0644 "etc/sysconfig/${pkgname}" -t "${pkgdir}/etc/conf.d"
87
install -Dm0644 "usr/lib/systemd/system/${pkgname}.service" -t "${pkgdir}/usr/lib/systemd/system"
88
install -Dm0644 "usr/lib/sysusers.d/${pkgname}.conf" -t "${pkgdir}/usr/lib/sysusers.d"
89
}
90
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |