sensu-go-agent

maintainer XenGi · 1 votes · base sensu-go · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from source hosted on GitHub and downloads example config files from the official documentation site; all other sources are local files, posing no execution risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source hosted on GitHub and downloads example config files from the official documentation site; all other sources are local files, posing no execution risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 "${pkgbase}-agent-${pkgver%.*}.yml.example::https://docs.sensu.io/sensu-go/${pkgver%.*}/files/agent.yml"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Ricardo Band <email@ricardo.band>
2
3pkgbase='sensu-go'
4pkgname=('sensu-go-agent' 'sensu-go-backend' 'sensu-go-cli')
5pkgdesc="Sensu is an open source monitoring tool for ephemeral infrastructure and distributed applications."
6pkgver=6.14.1
7pkgrel=1
8arch=('x86_64')
9url='https://sensu.io'
10license=('custom:MIT')
11groups=('sensu-go' 'sensu')
12makedepends=('go' 'curl' 'jq')
13depends=('glibc')
14source=("${pkgbase}-${pkgver}.tar.gz::https://github.com/sensu/sensu-go/archive/refs/tags/v${pkgver}.tar.gz"
15 "${pkgbase/-go/}-agent.service"
16 "${pkgbase/-go/}-backend.service"
17 "${pkgbase}-agent-${pkgver%.*}.yml.example::https://docs.sensu.io/sensu-go/${pkgver%.*}/files/agent.yml"
18 "${pkgbase}-backend-${pkgver%.*}.yml.example::https://docs.sensu.io/sensu-go/${pkgver%.*}/files/backend.yml"
19 "${pkgbase/-go/}.sysusers"
20 "${pkgbase/-go/}.tmpfiles")
21sha256sums=('988f4ba5562dea6ade146dc38ad8f2c2d1b2062368c4850e81bc43679f18777d'
22 '2e512118a12f6e716c9279efd7d48eaa4e5e927a8a80444868808f34223e3c99'
23 '57c4e7835da2d58186e8e36518dc9e0b7cee93bd018619ec2a7210bf212d0d27'
24 '435ecda655594810f02181fe1b8e5e25a4a90f8cf992a9c6859226fbbad3300c'
25 '42cf8fcb1ed8127f4c481485b3decaca8490e1e538e113eab149e09e26c86e36'
26 'c4560bc809d59d5b4bff5a03c7c0082ae4eb903b82dee1d8d01b431a98eccbb2'
27 '7e5f0c7d8eb9161d9e9f40fd8ef825cc500156d4575eb3599c2083013bd22407')
28
29prepare() {
30 cd "${srcdir}/${pkgbase}-${pkgver}"
31
32 _pkgtagsha="$(curl -L https://api.github.com/repos/sensu/sensu-go/git/ref/tags/v${pkgver} | jq -r '.object.sha')"
33 mkdir -p build/
34}
35
36build() {
37 cd "${srcdir}/${pkgbase}-${pkgver}"
38
39 export CGO_CPPFLAGS="${CPPFLAGS}"
40 export CGO_CFLAGS="${CFLAGS}"
41 export CGO_CXXFLAGS="${CXXFLAGS}"
42 export CGO_LDFLAGS="${LDFLAGS}"
43 export GOFLAGS="-buildmode=pie -trimpath -mod=readonly -modcacherw"
44
45 go build -buildvcs=false -o build -ldflags="-linkmode=external -X='github.com/sensu/sensu-go/version.Version=${pkgver}' -X='github.com/sensu/sensu-go/version.BuildDate=$(date -I)' -X='github.com/sensu/sensu-go/version.BuildSHA=${_pkgtagsha}'" ./cmd/...
46}
47
48package_sensu-go-agent() {
49 pkgname='sensu-go-agent'
50 _pkgname=${pkgname/-go-/-}
51 pkgdesc="Sensu Go Agent"
52 provides=("${pkgname/-go-/-}")
53 conflicts=("${pkgname/-go-/-}")
54 #backup=('etc/sensu/agent.yml')
55
56 cd "${srcdir}/${pkgbase}-${pkgver}"
57
58 install -Dm755 "build/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
59 install -Dm755 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
60 install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
61 install -Dm644 "${srcdir}/${pkgname}-${pkgver%.*}.yml.example" "${pkgdir}/usr/share/doc/${pkgname}/${pkgname/$pkgbase-/}.yml.example"
62 install -Dm644 "${srcdir}/${_pkgname}.service" "${pkgdir}/usr/lib/systemd/system/${_pkgname}.service"
63 install -Dm644 "${srcdir}/${pkgbase/-go/}.sysusers" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
64 install -Dm644 "${srcdir}/${pkgbase/-go/}.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/${pkgname}.conf"
65}
66
67package_sensu-go-backend() {
68 pkgname='sensu-go-backend'
69 _pkgname=${pkgname/-go-/-}
70 pkgdesc="Sensu Go Backend"
71 provides=("${pkgname/-go-/-}")
72 conflicts=("${pkgname/-go-/-}")
73 #backup=('etc/sensu/backend.yml')
74
75 cd "${srcdir}/${pkgbase}-${pkgver}"
76
77 install -Dm755 "build/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
78 install -Dm755 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
79 install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
80 install -Dm644 "${srcdir}/${pkgname}-${pkgver%.*}.yml.example" "${pkgdir}/usr/share/doc/${pkgname}/${pkgname/$pkgbase-/}.yml.example"
81 install -Dm644 "${srcdir}/${_pkgname}.service" "${pkgdir}/usr/lib/systemd/system/${_pkgname}.service"
82 install -Dm644 "${srcdir}/${pkgbase/-go/}.sysusers" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
83 install -Dm644 "${srcdir}/${pkgbase/-go/}.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/${pkgname}.conf"
84}
85
86package_sensu-go-cli() {
87 pkgname='sensu-go-cli'
88 _pkgname=${pkgname/-go-/-}
89 pkgdesc="Sensu Go CLI"
90 provides=("${pkgname/-go-/-}")
91 conflicts=("${pkgname/-go-/-}")
92
93 cd "${srcdir}/${pkgbase}-${pkgver}"
94
95 install -Dm755 "build/${_pkgname/-cli/ctl}" "${pkgdir}/usr/bin/${_pkgname/-cli/ctl}"
96 install -Dm755 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
97 install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
98}
99

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion