slant-git

maintainer aperez · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from source code hosted on official and project-owned domains (github.com, kristaps.bsd.lv, ftp.openbsd.org, sqlite.org); the non-whitelisted hosts are legitimate project infrastructure, and all downloaded sources are compiled locally without executing untrusted binaries.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source code hosted on official and project-owned domains (github.com, kristaps.bsd.lv, ftp.openbsd.org, sqlite.org); the non-whitelisted hosts are legitimate project infrastructure, and all downloaded sources are compiled locally without executing untrusted binaries.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 "http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${_libressl_ver}.tar.gz"
PKGBUILD:16 "https://www.sqlite.org/2019/sqlite-amalgamation-${_sqlite3_ver}.zip")

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: Adrian Perez de Castro <aperez@igalia.com>
    
      2_libressl_ver='2.8.3'
    
      3_sqlite3_ver='3270100'
    
      4pkgname=slant-git
    
      5pkgver=0.0.17.r10.gc3d1f0b
    
      6pkgrel=1
    
      7pkgdesc='Minimal open source system monitor for remote UNIX machines'
    
      8url=https://kristaps.bsd.lv/slant
    
      9license=(custom:ISC)
    
      10arch=(x86_64)
    
      11makedepends=(kwebapp kcgi ksql git)
    
      12depends=(zlib sh)
    
      13source=("${pkgname}::git+https://github.com/kristapsdz/${pkgname%-git}/"
    
      "http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${_libressl_ver}.tar.gz"
    
      "http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-${_libressl_ver}.tar.gz.asc"
    
"https://www.sqlite.org/2019/sqlite-amalgamation-${_sqlite3_ver}.zip")
    
      17sha512sums=('SKIP'
    
          '3967e08b3dc2277bf77057ea1f11148df7f96a2203cd21cf841902f2a1ec11320384a001d01fa58154d35612f7981bf89d5b1a60a2387713d5657677f76cc682'
    
          'SKIP'
    
          '9e9ace498bfb89631d3798e43d3da372d204b869948ecd77fbf18a7eee2b364cdbc6d20fc0482457506a5301bb492fec3af9bf87d4d9f047e08181b7e74aeb68')
    
      21validpgpkeys=(A1EB079B8D3EB92B4EBD3139663AF51BD5E4D8D5)
    
      22
    
      23pkgver () {
    
cd "${pkgname}"
    
( set -o pipefail
    
 git describe --long --tags 2> /dev/null\
    
 	| sed -e 's/^VERSION_//;s/\([^-]*-g\)/r\1/;s/-/./g;s/_/./g' ||
    
 printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
)
    
      30}
    
      31
    
      32build () {
    
# SQLite3
    
msg2 "Building static SQLite3 ${_sqlite3_ver} ..."
    
cd "${srcdir}/sqlite-amalgamation-${_sqlite3_ver}"
    
gcc ${CFLAGS} \
    
-DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 \
    
-DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 \
    
-DHAVE_STRINGS_H=1 -DDHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 \
    
-DHAVE_UNISTD_H=1 -DHAVE_FDATASYNC=1 -DHAVE_USLEEP=1 \
    
-DHAVE_LOCALTIME_R=1 -DHAVE_GMTIME_R=1 -DHAVE_DECL_STRERROR_R=1 \
    
-DHAVE_STRERROR_R=1 -DHAVE_POSIX_FALLOCATE=1 -DHAVE_ZLIB_H=1 \
    
-D_REENTRANT=1 -DSQLITE_THREADSAFE=1 -DSQLITE_ENABLE_FTS{4,5} \
    
-DSQLITE_ENABLE_JSON1 -DSQLITE_ENABLE_RTREE \
    
-DSQLITE_ENABLE_SESSION -DSQLITE_OMIT_LOAD_EXTENSION \
    
-DSQLITE_ENABLE_PREUPDATE_HOOK -DSQLITE_HAVE_ZLIB \
    
-c -o sqlite3.o sqlite3.c
    
ar rcs libsqlite3.a sqlite3.o
    
      49
    
# LibreSSL
    
msg2 "Building static LibreSSL ${_libressl_ver} ..."
    
cd "${srcdir}/libressl-${_libressl_ver}"
    
./configure \
    
--disable-shared \
    
--enable-static \
    
--prefix=/usr \
    
--sysconfdir=/etc
    
make install DESTDIR="$(pwd)/prefix"
    

    
# Slant
    
msg2 "Building Slant ${pkgver} ..."
    
cd "${srcdir}/${pkgname}"
    
./configure PREFIX=/usr MANDIR=/usr/share/man SBINDIR=/usr/bin
    
      64
    
# Workaround things to make sure that binaries are linked to the
    
# static versions of LibreSSL and SQLite3 built above. This is
    
# ugly, but gets the job done.
    
cat >> Makefile.configure <<-EOF
    
XCFLAGS := \$(CFLAGS)
    
XCFLAGS += ${CFLAGS} -fPIC -fPIE -s
    
XCFLAGS += -I${srcdir}/libressl-${_libressl_ver}/prefix/usr/include
    
XCFLAGS += -I${srcdir}/sqlite-amalgamation-${_sqlite3_ver}
    
XCFLAGS += \$(shell pkg-config libtls libssl libcrypto --cflags) -pthread
    
      74
    
XLDFLAGS := \$(LDFLAGS)
    
XLDFLAGS += ${LDFLAGS} -fPIE -s
    
XLDFLAGS += -L${srcdir}/libressl-${_libressl_ver}/prefix/usr/lib
    
XLDFLAGS += -L${srcdir}/sqlite-amalgamation-${_sqlite3_ver}
    

    
XLDADD := \$(LDADD)
    
XLDADD += \$(shell pkg-config libtls libssl libcrypto --libs) -lm -lresolv -pthread
    
      82
    
override LDADD = \$(XLDADD)
    
override LDFLAGS = \$(XLDFLAGS)
    
override CFLAGS = \$(XCFLAGS)
    
      86
    
override LDADD_SLANT_COLLECTD = \$(XLDADD)
    
override LDADD_SLANT_CGI = \$(XLDADD)
    
override LDADD_SLANT = \$(XLDADD)
    
EOF
    
      91
    
PKG_CONFIG_PATH="${srcdir}/libressl-${_libressl_ver}/prefix/usr/lib/pkgconfig" \
    
make
    
      94}
    
      95
    
      96package () {
    
cd "${pkgname}"
    
      98
    
# Ugh. Workaround.
    
install -dm755 "${pkgdir}/usr/share/man"/man{1,8}
    
      101
    
PKG_CONFIG_PATH="${srcdir}/libressl-${_libressl_ver}/prefix/usr/lib/pkgconfig" \
    
make install \
    
	DESTDIR="${pkgdir}" \
    
	PREFIX=/usr \
    
	SBINDIR=/usr/bin \
    
	MANDIR=/usr/share/man \
    
	CGIBIN=/usr/lib/slant
    
      109}
    
      110

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2