pinentry-git

maintainer Chocobo1 · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from the official project Git repository and includes two auxiliary scripts from the Arch Linux packaging repository; while the hosts are not whitelisted, the sources are from trusted project and distribution infrastructure, and the installed files are either built locally or verifiable scripts used for integration.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official project Git repository and includes two auxiliary scripts from the Arch Linux packaging repository; while the hosts are not whitelisted, the sources are from trusted project and distribution infrastructure, and the installed files are either built locally or verifiable scripts used for integration.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("git+https://dev.gnupg.org/source/pinentry.git"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Chocobo1 <chocobo1 AT archlinux DOT net>
    
      2
    
      3pkgname=pinentry-git
    
      4pkgver=1.2.1.r21.g21e8533
    
      5pkgrel=2
    
      6pkgdesc="A small collection of dialog programs that allow GnuPG to read passphrases and PIN numbers in a secure manner"
    
      7arch=('i686' 'x86_64')
    
      8url="https://gnupg.org/software/pinentry/index.html"
    
      9license=('GPL2')
    
      10depends=('glibc' 'glib2' 'libassuan' 'libcap' 'libsecret' 'ncurses')
    
      11makedepends=('git' 'efl' 'gcr' 'gtk2' 'qt5-base')
    
      12provides=("pinentry=$pkgver")
    
      13conflicts=('pinentry')
    
      14source=("git+https://dev.gnupg.org/source/pinentry.git"
    
      15        "pinentry.bin::https://gitlab.archlinux.org/archlinux/packaging/packages/pinentry/-/raw/main/pinentry"
    
      16        "preexec::https://gitlab.archlinux.org/archlinux/packaging/packages/pinentry/-/raw/main/preexec")
    
      17sha256sums=('SKIP'
    
      18            'SKIP'
    
      19            'SKIP')
    
      20
    
      21
    
      22pkgver() {
    
      23  cd "pinentry"
    
      24
    
      25  git describe --long --tags | sed 's/^pinentry-//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      26}
    
      27
    
      28build() {
    
      29  cd "pinentry"
    
      30
    
      31  ./autogen.sh --force
    
      32  ./configure \
    
      33    --prefix="/usr" \
    
      34    --enable-maintainer-mode \
    
      35    --enable-pinentry-tty \
    
      36    --enable-pinentry-curses \
    
      37    --enable-fallback-curses \
    
      38    --enable-pinentry-efl \
    
      39    --enable-pinentry-emacs \
    
      40    --enable-pinentry-gnome3 \
    
      41    --enable-pinentry-gtk2 \
    
      42    --enable-pinentry-qt \
    
      43    --enable-libsecret
    
      44  make
    
      45}
    
      46
    
      47package() {
    
      48  cd "pinentry"
    
      49
    
      50  make DESTDIR="$pkgdir" install
    
      51  install -Dm755 "$srcdir/pinentry.bin" "$pkgdir/usr/bin/pinentry"
    
      52  install -Dm755 "$srcdir/preexec" -t "$pkgdir/etc/pinentry"
    
      53}
    
      54

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2