smartctl_exporter

LOW

maintainer k0ste 1 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The source downloads from codeload.github.com and GitHub pull requests are from the project's official repository, making them legitimate sources for building; patches are checksummed, and no untrusted executable code is introduced.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source downloads from codeload.github.com and GitHub pull requests are from the project's official repository, making them legitimate sources for building; patches are checksummed, and no untrusted executable code is introduced.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/${pkgname}/tar.gz/refs/tags/v${pkgver}"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Shalygin Konstantin <k0ste@k0ste.ru>
    
      2# Contributor: Shalygin Konstantin <k0ste@k0ste.ru>
    
      3
    
      4pkgname='smartctl_exporter'
    
      5pkgver='0.15.0'
    
      6pkgrel='1'
    
      7pkgdesc='Prometheus exporter for S.M.A.R.T. metrics using smartctl'
    
      8arch=('x86_64' 'aarch64')
    
      9_uri="github.com/prometheus-community"
    
      10url="https://${_uri}/${pkgname}"
    
      11license=('Apache2.0')
    
      12makedepends=('go')
    
      13depends=('smartmontools')
    
      14source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/${pkgname}/tar.gz/refs/tags/v${pkgver}"
    
      15	"${pkgname}"
    
      16	"${pkgname}.service"
    
      17	"${pkgname}.sysusers"
    
      18	"${url}/pull/290.patch"
    
      19	"${url}/pull/293.patch")
    
      20sha256sums=('19cda1ade2751c0b4b1ace67773234fecdea2827fb9325e255af2774f0e36435'
    
      21            '511edb35835b2973bf3103bc9158dfa1541df428c4c3aea39130371e01c657f7'
    
      22            '3996649590d84e1870f89adddbd7a2a683d629151b799c5f1f87c1e2e7f5cf10'
    
      23            '5e6201273dee78f4fad265209cc539472c5ef66ed77d334d4071a1661f1b40cd'
    
      24            'd09008a90977d6d5eb3384a97e49af2393ea583ae07a512594901bf8ddeb2dae'
    
      25            'de378881ea8a1f693381cd6a6ad56d09b3a09c78d1a5a9dfa829f3a4933d1a3b')
    
      26backup=("etc/conf.d/${pkgname}")
    
      27
    
      28prepare() {
    
      29  export GOPATH="${srcdir}/gopath"
    
      30  export GOBIN="${GOPATH}/bin"
    
      31  export GOTMPDIR="${GOPATH}/tmp"
    
      32  export GOCACHE="${srcdir}/cache/go-cache"
    
      33  export GOMODCACHE="${srcdir}/cache/go"
    
      34  mkdir -p "${GOPATH}/src/${_uri}"
    
      35  mkdir -p "${GOTMPDIR}"
    
      36  eval "$(go env | grep -e "GOHOSTOS" -e "GOHOSTARCH")"
    
      37  ln -snf "${srcdir}/${pkgname}-${pkgver}" "${GOPATH}/src/${_uri}/${pkgname}"
    
      38
    
      39  cd "${GOPATH}/src/${_uri}/${pkgname}"
    
      40  for e in "${srcdir}/"*".patch"
    
      41    do
    
      42    echo "Apply patch: ${e}"
    
      43    patch -p1 -i "${e}"
    
      44  done
    
      45}
    
      46
    
      47build() {
    
      48  cd "${GOPATH}/src/${_uri}/${pkgname}"
    
      49  export CGO_CFLAGS="${CFLAGS} ${DEBUG_CFLAGS}"
    
      50  export CGO_LDFLAGS="${LDFLAGS}"
    
      51  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      52  export CGO_CXXFLAGS="${CXXFLAGS} ${DEBUG_CXXFLAGS}"
    
      53  GOOS="${GOHOSTOS}" GOARCH="${GOHOSTARCH}" \
    
      54  go build -v \
    
      55    -tags="netgo" \
    
      56    -buildmode="pie" \
    
      57    -trimpath \
    
      58    -mod="readonly" \
    
      59    -modcacherw \
    
      60    -ldflags "-compressdwarf=false -linkmode external -extldflags '${LDFLAGS}' \
    
      61    -X github.com/prometheus/common/version.Version=${pkgver} \
    
      62    -X github.com/prometheus/common/version.Revision=$(git rev-parse HEAD) \
    
      63    -X github.com/prometheus/common/version.Branch=tarball \
    
      64    -X github.com/prometheus/common/version.BuildUser=$(whoami)@$(hostnamectl hostname) \
    
      65    -X github.com/prometheus/common/version.BuildDate=$(date -u '+%Y%m%d-%H:%M:%S' --date=@${SOURCE_DATE_EPOCH})"
    
      66}
    
      67
    
      68check() {
    
      69  cd "${GOPATH}/src/${_uri}/${pkgname}"
    
      70  TMPDIR="${GOPATH}/tmp" go test -modcacherw -v ./...
    
      71}
    
      72
    
      73package() {
    
      74  install -Dm0644 "${pkgname}-${pkgver}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      75  install -Dm0755 "${pkgname}-${pkgver}/${pkgname}" -t "${pkgdir}/usr/bin"
    
      76  install -Dm0644 "${pkgname}" -t "${pkgdir}/etc/conf.d"
    
      77  install -Dm0644 "${pkgname}.service" -t "${pkgdir}/usr/lib/systemd/system"
    
      78  install -Dm0644 "${pkgname}.sysusers" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
    
      79}
    
      80

Changes since previous scan

--- PKGBUILD @ 2026-07-03 15:12
+++ PKGBUILD @ 2026-10-17 00:21
@@ -2,35 +2,38 @@
 # Contributor: Shalygin Konstantin <k0ste@k0ste.ru>
 
 pkgname='smartctl_exporter'
-pkgver='0.14.0'
-pkgrel='3'
+pkgver='0.15.0'
+pkgrel='1'
 pkgdesc='Prometheus exporter for S.M.A.R.T. metrics using smartctl'
 arch=('x86_64' 'aarch64')
 _uri="github.com/prometheus-community"
 url="https://${_uri}/${pkgname}"
-license=('GNU')
+license=('Apache2.0')
 makedepends=('go')
 depends=('smartmontools')
-source=("${url}/archive/refs/tags/v${pkgver}.tar.gz"
+source=("${pkgname}-${pkgver}.tar.gz::https://codeload.${_uri}/${pkgname}/tar.gz/refs/tags/v${pkgver}"
 	"${pkgname}"
 	"${pkgname}.service"
+	"${pkgname}.sysusers"
 	"${url}/pull/290.patch"
 	"${url}/pull/293.patch")
-sha256sums=('0c3a658b1a16117e31e808f6f8852ddc7df5be6edea1b17c08263069b72d88d8'
-            '8e67aa678e74b64d500529334001fa029d163cb61146810faeec22401b07d362'
-            '2b88ccdd7a0582510721dc8ee54c685d9a92503611517aae9fc34d1b113e124c'
-            'c0286315e557649eaf878726b45349086cc395cc280f6beb39a5423a01f50ca5'
-            '7b4b124ae3ee4f57101500ec9ea48dbd8d1f7f13602db5369f94f13b915c26fb')
+sha256sums=('19cda1ade2751c0b4b1ace67773234fecdea2827fb9325e255af2774f0e36435'
+            '511edb35835b2973bf3103bc9158dfa1541df428c4c3aea39130371e01c657f7'
+            '3996649590d84e1870f89adddbd7a2a683d629151b799c5f1f87c1e2e7f5cf10'
+            '5e6201273dee78f4fad265209cc539472c5ef66ed77d334d4071a1661f1b40cd'
+            'd09008a90977d6d5eb3384a97e49af2393ea583ae07a512594901bf8ddeb2dae'
+            'de378881ea8a1f693381cd6a6ad56d09b3a09c78d1a5a9dfa829f3a4933d1a3b')
 backup=("etc/conf.d/${pkgname}")
 
 prepare() {
   export GOPATH="${srcdir}/gopath"
   export GOBIN="${GOPATH}/bin"
+  export GOTMPDIR="${GOPATH}/tmp"
   export GOCACHE="${srcdir}/cache/go-cache"
   export GOMODCACHE="${srcdir}/cache/go"
-  export GOTMPDIR="${srcdir}"
+  mkdir -p "${GOPATH}/src/${_uri}"
+  mkdir -p "${GOTMPDIR}"
   eval "$(go env | grep -e "GOHOSTOS" -e "GOHOSTARCH")"
-  mkdir -p "${GOPATH}/src/${_uri}"
   ln -snf "${srcdir}/${pkgname}-${pkgver}" "${GOPATH}/src/${_uri}/${pkgname}"
 
   cd "${GOPATH}/src/${_uri}/${pkgname}"
@@ -43,14 +46,18 @@
 
 build() {
   cd "${GOPATH}/src/${_uri}/${pkgname}"
+  export CGO_CFLAGS="${CFLAGS} ${DEBUG_CFLAGS}"
+  export CGO_LDFLAGS="${LDFLAGS}"
+  export CGO_CPPFLAGS="${CPPFLAGS}"
+  export CGO_CXXFLAGS="${CXXFLAGS} ${DEBUG_CXXFLAGS}"
   GOOS="${GOHOSTOS}" GOARCH="${GOHOSTARCH}" \
-  go build -x \
+  go build -v \
     -tags="netgo" \
     -buildmode="pie" \
     -trimpath \
     -mod="readonly" \
     -modcacherw \
-    -ldflags "-linkmode external -extldflags '${LDFLAGS}' \
+    -ldflags "-compressdwarf=false -linkmode external -extldflags '${LDFLAGS}' \
     -X github.com/prometheus/common/version.Version=${pkgver} \
     -X github.com/prometheus/common/version.Revision=$(git rev-parse HEAD) \
     -X github.com/prometheus/common/version.Branch=tarball \
@@ -59,14 +66,15 @@
 }
 
 check() {
-  cd "${GOPATH}/src/${_uri}/${pkgbase}"
-  go test -modcacherw ./...
+  cd "${GOPATH}/src/${_uri}/${pkgname}"
+  TMPDIR="${GOPATH}/tmp" go test -modcacherw -v ./...
 }
 
 package() {
-  install -Dm0644 "${GOPATH}/src/${_uri}/${pkgbase}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
-  install -Dm0755 "${GOPATH}/src/${_uri}/${pkgname}/${pkgname}" -t "${pkgdir}/usr/bin"
+  install -Dm0644 "${pkgname}-${pkgver}/LICENSE" -t "${pkgdir}/usr/share/licenses/${pkgname}"
+  install -Dm0755 "${pkgname}-${pkgver}/${pkgname}" -t "${pkgdir}/usr/bin"
   install -Dm0644 "${pkgname}" -t "${pkgdir}/etc/conf.d"
   install -Dm0644 "${pkgname}.service" -t "${pkgdir}/usr/lib/systemd/system"
+  install -Dm0644 "${pkgname}.sysusers" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 14:11:17	Medium	1
2026-07-03 15:12:12	Clean	0
2026-06-18 16:11:54	Clean	0