python-sqlalchemy-cockroachdb
LOW
maintainer orphaned
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt CockroachDB binaries from the official binaries.cockroachdb.com domain for testing, which is a legitimate vendor host, not a personal or untrusted file-sharing service, and the checksums are verified, so the risk is low despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt CockroachDB binaries from the official binaries.cockroachdb.com domain for testing, which is a legitimate vendor host, not a personal or untrusted file-sharing service, and the checksums are verified, so the risk is low despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source_x86_64=("https://binaries.cockroachdb.com/cockroach-v24.3.8.linux-amd64.tgz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Mohamed Amine Zghal (medaminezghal) <medaminezghal at outlook dot com>
2
3
_name=sqlalchemy-cockroachdb
4
pkgname=python-${_name}
5
pkgver=2.0.2
6
pkgrel=3
7
pkgdesc='CockroachDB dialect for SQLAlchemy.'
8
arch=('x86_64' 'aarch64')
9
url='https://github.com/cockroachdb/sqlalchemy-cockroachdb'
10
license=('Apache-2.0')
11
source=("${url}/archive/refs/tags/v${pkgver}.tar.gz")
12
source_x86_64=("https://binaries.cockroachdb.com/cockroach-v24.3.8.linux-amd64.tgz")
13
source_aarch64=("https://binaries.cockroachdb.com/cockroach-v24.3.8.linux-arm64.tgz")
14
sha256sums=('03fbb61ae8230963609da468301c18678889a200f6ffd0f057b57065be8fb99f')
15
sha256sums_x86_64=('ebd27dbf7d4713a81aa534b9ba00f89ba970a6d20c37a7a0e73fd139147fa760')
16
sha256sums_aarch64=('3fc03415d4f96c36258ccf141b5d6ab0fc3e51e9e670eeb6cf695ad064bfcbbb')
17
depends=('python>=3.8' 'python-sqlalchemy')
18
makedepends=('python-setuptools' 'python-build' 'python-installer' 'python-wheel')
19
checkdepends=('python-alembic' 'python-asyncpg' 'python-mock' 'python-more-itertools' 'python-psycopg' 'python-psycopg2' 'python-pytest' 'python-sqlalchemy')
20
21
prepare(){
22
rm -rf cockroachdb
23
if [ -d "cockroach-v24.3.8.linux-amd64" ]; then
24
mv -f cockroach-v24.3.8.linux-amd64 cockroachdb
25
else
26
mv -f cockroach-v24.3.8.linux-arm64 cockroachdb
27
fi
28
}
29
30
build() {
31
cd "${srcdir}"/${_name}-${pkgver}
32
python -m build --wheel --no-isolation
33
}
34
35
check() {
36
cd "${srcdir}"/cockroachdb
37
./cockroach start-single-node --insecure --background || true
38
./cockroach init --insecure || true
39
./cockroach sql --insecure -e 'CREATE SCHEMA test_schema; CREATE SCHEMA test_schema_2;' || true
40
local pytest_options=(
41
-vv
42
--override-ini="addopts="
43
)
44
cd "${srcdir}"/${_name}-${pkgver}
45
rm -rf test-env
46
python -m venv --system-site-packages test-env
47
test-env/bin/python -m installer dist/*.whl
48
for db in asyncpg psycopg psycopg2; do
49
rm -rf scratch
50
db_name=$([[ "$db" == "asyncpg" ]] && echo "${db}_async" || echo "$db")
51
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.ANY-ObjectScope.ANY-None-_exclusions_00]")
52
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.ANY-ObjectScope.DEFAULT-None-_exclusions_00]")
53
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE-ObjectScope.ANY-None-_exclusions_00]")
54
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE-ObjectScope.DEFAULT-None-_exclusions_00]")
55
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE|MATERIALIZED_VIEW-ObjectScope.ANY-None-_exclusions_00]")
56
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE|MATERIALIZED_VIEW-ObjectScope.DEFAULT-None-_exclusions_00]")
57
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE|VIEW-ObjectScope.ANY-None-_exclusions_00]")
58
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[False-ObjectKind.TABLE|VIEW-ObjectScope.DEFAULT-None-_exclusions_00]")
59
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.ANY-ObjectScope.ANY-None-_exclusions_00]")
60
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.ANY-ObjectScope.DEFAULT-None-_exclusions_00]")
61
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE-ObjectScope.ANY-None-_exclusions_00]")
62
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE-ObjectScope.DEFAULT-None-_exclusions_00]")
63
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE|MATERIALIZED_VIEW-ObjectScope.ANY-None-_exclusions_00]")
64
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE|MATERIALIZED_VIEW-ObjectScope.DEFAULT-None-_exclusions_00]")
65
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE|VIEW-ObjectScope.ANY-None-_exclusions_00]")
66
pytest_options+=("--deselect" "test/test_suite_sqlalchemy.py::ComponentReflectionTest_cockroachdb+${db_name}_9_5_0::test_get_multi_check_constraints[True-ObjectKind.TABLE|VIEW-ObjectScope.DEFAULT-None-_exclusions_00]")
67
test-env/bin/python -m pytest "${pytest_options[@]}" test --db="$db"
68
done
69
pkill -f cockroach
70
}
71
72
package() {
73
cd "${srcdir}"/${_name}-${pkgver}
74
python -m installer --destdir="$pkgdir" dist/*.whl
75
}
76
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |