stork-agent

MEDIUM
maintainer andreip 1 votes scanned 2026-08-25 15:26:42.169879
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:12 source=("https://downloads.isc.org/isc/${_repo}/${pkgver}/${_repo}-${pkgver}.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1pkgname='stork-agent'
2pkgver='2.5.0'
3pkgrel='1'
4pkgdesc="The agent that monitors ISC BIND 9 DNS, ISC Kea DHCP, and other services as part of ISC Stork."
5arch=('any')
6url='https://gitlab.isc.org/isc-projects/stork'
7license=('MPL2')
8depends=()
9makedepends=('python' 'rake' 'sed' 'tar' 'unzip' 'wget')
10backup=('etc/stork/agent.env')
11_repo='stork'
12source=("https://downloads.isc.org/isc/${_repo}/${pkgver}/${_repo}-${pkgver}.tar.gz")
13 # "https://gitlab.isc.org/isc-projects/${_repo}/-/archive/v${pkgver}/${_pkg}.tar.gz"
14sha512sums=(
15 'cf46e86da8b08e07e97067096b4705a1ad8207152733cf814767c5ce3c48ba2ce12ce8028f7e2d07ecd3689b66080634a02f17f8636f0ea10d3b96e4b5b1b972'
16)
17
18build() {
19 tar -xzf "${_repo}-${pkgver}.tar.gz"
20 cd "${_repo}-${pkgver}"
21 export CGO_CPPFLAGS="${CPPFLAGS}"
22 export CGO_CFLAGS="${CFLAGS}"
23 export CGO_CXXFLAGS="${CXXFLAGS}"
24 export CGO_LDFLAGS="${LDFLAGS}"
25 export GOFLAGS='-buildmode=pie -ldflags=-linkmode=external -mod=readonly -modcacherw -trimpath'
26 rake build:agent
27 cd ..
28}
29
30package() {
31 cd "${_repo}-${pkgver}"
32 rake install:agent DEST="${pkgdir}"
33 mkdir -p "${pkgdir}/usr/share"
34 mv "${pkgdir}/lib" "${pkgdir}/usr"
35 cd ..
36}
37

Scan history

Scanned at (UTC)SeverityRules
2026-08-25 15:26:42 Medium 1
2026-06-20 00:18:46 Clean 2
2026-06-19 23:51:18 Clean 2
2026-06-19 19:07:35 Low 2
2026-06-18 18:55:24 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion