stork-server

MEDIUM

maintainer andreip 2 votes scanned 2026-08-25 15:26:42.169879

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 "https://downloads.isc.org/isc/${_repo}/${pkgver}/${_repo}-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1pkgname='stork-server'
    
      2pkgver='2.5.1'
    
      3pkgrel='1'
    
      4pkgdesc="A dashboard for ISC BIND 9 DNS, ISC Kea DHCP, PowerDNS, and other services."
    
      5arch=('any')
    
      6url='https://gitlab.isc.org/isc-projects/stork'
    
      7license=('MPL2')
    
      8depends=()
    
      9makedepends=('java-runtime' 'python' 'rake' 'sed' 'tar' 'unzip' 'wget')
    
      10backup=('etc/stork/server.env')
    
      11_repo='stork'
    
      12source=(
    
      13  "https://downloads.isc.org/isc/${_repo}/${pkgver}/${_repo}-${pkgver}.tar.gz"
    
      14  "https://downloads.isc.org/isc/${_repo}/${pkgver}/${_repo}-server-ldap-${pkgver}.tar.gz"
    
      15  "${pkgname}.sysuser"
    
      16)
    
      17  # "https://gitlab.isc.org/isc-projects/${_repo}/-/archive/v${pkgver}/${_pkg}.tar.gz"
    
      18  # "https://gitlab.isc.org/isc-projects/stork-hook-ldap/-/archive/v${pkgver}/stork-hook-ldap-v${pkgver}.tar.gz"
    
      19sha512sums=(
    
      20  'ae9389333580df50841911e7a5c4228a575cc708ee2538a291baa7d60e74e753e702e58860b6591b2d33a36762bf57bfb22bd72b832de7375ea532ff0d04f93f'
    
      21  '0918e22c405417c201c90713f462cf2460e9daca34f93170bbdeb47b8a1b9aa6df052e735864f18299579a98bf1c2d903a9ebc15237f545c5ce55a660e1b99a3'
    
      22  '524a319ab3b938bdab902b82c99744dcbf90cf5b44dc2bc7003b5fac7b77f6bb07d260c7f5cdd3fee8d3f673ca23611b00d1ded27a96da6fcb85d16e70b7a580'
    
      23)
    
      24
    
      25build() {
    
      26  tar -xzf "${_repo}-${pkgver}.tar.gz"
    
      27  tar -xzf "${_repo}-server-ldap-${pkgver}.tar.gz"
    
      28  cd "${_repo}-${pkgver}"
    
      29  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      30  export CGO_CFLAGS="${CFLAGS}"
    
      31  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      32  export CGO_LDFLAGS="${LDFLAGS}"
    
      33  export GOFLAGS='-buildmode=pie -ldflags=-linkmode=external -mod=readonly -modcacherw -trimpath'
    
      34  rm -rf ./hooks/stork-server-ldap
    
      35  cp -rf "../${_repo}-server-ldap-${pkgver}/" ./hooks/stork-server-ldap
    
      36  rake build:server
    
      37  rake hook:build
    
      38  cd ..
    
      39}
    
      40
    
      41package() {
    
      42  cd "${_repo}-${pkgver}"
    
      43  rake install:server DEST="${pkgdir}"
    
      44  mkdir -p "${pkgdir}/usr/share"
    
      45  mv "${pkgdir}/lib" "${pkgdir}/usr"
    
      46  install -Dm644 "./hooks/stork-server-ldap/build/stork-server-ldap.so" "${pkgdir}/usr/lib/stork-server-ldap.so"
    
      47  install -Dm644 "${srcdir}/${pkgname}.sysuser" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
    
      48  cd ..
    
      49}
    
      50

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-08-25 15:26
@@ -1,5 +1,5 @@
 pkgname='stork-server'
-pkgver='2.5.0'
+pkgver='2.5.1'
 pkgrel='1'
 pkgdesc="A dashboard for ISC BIND 9 DNS, ISC Kea DHCP, PowerDNS, and other services."
 arch=('any')
@@ -17,8 +17,8 @@
   # "https://gitlab.isc.org/isc-projects/${_repo}/-/archive/v${pkgver}/${_pkg}.tar.gz"
   # "https://gitlab.isc.org/isc-projects/stork-hook-ldap/-/archive/v${pkgver}/stork-hook-ldap-v${pkgver}.tar.gz"
 sha512sums=(
-  'cf46e86da8b08e07e97067096b4705a1ad8207152733cf814767c5ce3c48ba2ce12ce8028f7e2d07ecd3689b66080634a02f17f8636f0ea10d3b96e4b5b1b972'
-  '9f5234f6425011e35fa87187f4c3cdbadae31d7e83d85b2b007d49c1b565ec9f97467562d461b18c83d6ceb95f2ce0793ab0c2ca08de1ef61bb2528957ec191f'
+  'ae9389333580df50841911e7a5c4228a575cc708ee2538a291baa7d60e74e753e702e58860b6591b2d33a36762bf57bfb22bd72b832de7375ea532ff0d04f93f'
+  '0918e22c405417c201c90713f462cf2460e9daca34f93170bbdeb47b8a1b9aa6df052e735864f18299579a98bf1c2d903a9ebc15237f545c5ce55a660e1b99a3'
   '524a319ab3b938bdab902b82c99744dcbf90cf5b44dc2bc7003b5fac7b77f6bb07d260c7f5cdd3fee8d3f673ca23611b00d1ded27a96da6fcb85d16e70b7a580'
 )
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-25 15:26:42	Medium	1
2026-06-20 00:18:46	Clean	2
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-18 18:55:24	Clean	2
2026-06-18 16:11:54	Medium	1