sway-session

MEDIUM

maintainer marang 0 votes scanned 2026-11-04 18:07:34.859631

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("sway-session-$pkgver.tar.gz::https://get.izoone.com/sway-session/v$pkgver/sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: marang <1550038+marang@users.noreply.github.com>
    
      2# Release template: the AUR workflow resolves the requested immutable release
    
      3# tag, pins source to its verified commit and computes the archive checksum
    
      4# before verification, build and publication. Historical bootstrap placeholders
    
      5# must never reach the AUR.
    
      6pkgname=sway-session
    
      7pkgver=0.11.1
    
      8pkgrel=2
    
      9_commit=399e618d1b0a86375f9eb9a777ecf2dc57a55ba6
    
      10pkgdesc="Persistent work sessions for Sway"
    
      11arch=('x86_64' 'aarch64')
    
      12url="https://entire.com/et/marang/sway-session"
    
      13license=('MIT')
    
      14depends=('sway')
    
      15makedepends=('go>=1.26.10')
    
      16options=('!debug')
    
      17source=("sway-session-$pkgver.tar.gz::https://get.izoone.com/sway-session/v$pkgver/sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6.tar.gz")
    
      18sha256sums=('cf6cd82ddde4dcfca656d3a25d5ce5ce537270f72cd75662f92524d1052e6411')
    
      19
    
      20_go_build_flags=(-buildmode=pie -trimpath -buildvcs=false -mod=readonly -modcacherw)
    
      21# This historical source uses the old module; release preparation rebinds the
    
      22# stamp symbol to the selected release source's module.
    
      23_go_ldflags=(-s -w -buildid= -X "main.version=$pkgver" -X "main.commit=$_commit" -X "main.modified=false" -X "go.izoone.com/sway-session/internal/buildmetadata.Stamp=sway-session-build-v1|$pkgver|$_commit|false|end-sway-session-build-v1")
    
      24
    
      25build() {
    
      26  cd "sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6"
    
      27  export GOCACHE="$srcdir/go-build"
    
      28  export GOMODCACHE="$srcdir/go-mod"
    
      29  export GOTOOLCHAIN=local
    
      30
    
      31  CGO_ENABLED=0 go build "${_go_build_flags[@]}" -ldflags="${_go_ldflags[*]}" -o sway-session ./cmd/sway-session
    
      32}
    
      33
    
      34check() {
    
      35  cd "sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6"
    
      36  export GOCACHE="$srcdir/go-build"
    
      37  export GOMODCACHE="$srcdir/go-mod"
    
      38  export GOTOOLCHAIN=local
    
      39
    
      40  CGO_ENABLED=0 go test "${_go_build_flags[@]}" -count=1 ./...
    
      41}
    
      42
    
      43package() {
    
      44  cd "sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6"
    
      45  install -Dm755 sway-session "$pkgdir/usr/bin/sway-session"
    
      46  install -Dm644 contrib/completions/bash/sway-session "$pkgdir/usr/share/bash-completion/completions/sway-session"
    
      47  install -Dm644 contrib/completions/zsh/_sway-session "$pkgdir/usr/share/zsh/site-functions/_sway-session"
    
      48  install -Dm644 contrib/completions/fish/sway-session.fish "$pkgdir/usr/share/fish/vendor_completions.d/sway-session.fish"
    
      49  install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      50  install -Dm644 README.md "$pkgdir/usr/share/doc/$pkgname/README.md"
    
      51  # Keep this recipe usable with the currently pinned pre-branding release.
    
      52  if [[ -f docs/branding.md ]]; then
    
      53    install -Dm644 docs/branding.md "$pkgdir/usr/share/doc/$pkgname/docs/branding.md"
    
      54    install -d "$pkgdir/usr/share/doc/$pkgname/docs/assets"
    
      55    install -m644 docs/assets/*.jpeg "$pkgdir/usr/share/doc/$pkgname/docs/assets/"
    
      56  fi
    
      57  install -Dm644 docs/sway-session-plan.md "$pkgdir/usr/share/doc/$pkgname/docs/sway-session-plan.md"
    
      58  if [[ -f docs/agent-reporting.md ]]; then
    
      59    install -Dm644 docs/agent-reporting.md "$pkgdir/usr/share/doc/$pkgname/docs/agent-reporting.md"
    
      60  fi
    
      61  if [[ -f docs/named-work-environments.md ]]; then
    
      62    install -Dm644 docs/named-work-environments.md "$pkgdir/usr/share/doc/$pkgname/docs/named-work-environments.md"
    
      63    install -Dm644 docs/research/lab-375-reach-focus-capability.md "$pkgdir/usr/share/doc/$pkgname/docs/research/lab-375-reach-focus-capability.md"
    
      64    install -Dm644 docs/adr/0002-nonowning-work-environments.md "$pkgdir/usr/share/doc/$pkgname/docs/adr/0002-nonowning-work-environments.md"
    
      65  fi
    
      66  # Keep the release template usable with the currently pinned older source.
    
      67  if [[ -f docs/lifecycle-recovery.md ]]; then
    
      68    install -Dm644 docs/lifecycle-recovery.md "$pkgdir/usr/share/doc/$pkgname/docs/lifecycle-recovery.md"
    
      69    install -Dm644 docs/research/herdr-plugin-session-deletion.md "$pkgdir/usr/share/doc/$pkgname/docs/research/herdr-plugin-session-deletion.md"
    
      70  fi
    
      71  if [[ -f docs/adr/0003-explicit-remote-terminal-bindings.md ]]; then
    
      72    install -Dm644 docs/adr/0003-explicit-remote-terminal-bindings.md "$pkgdir/usr/share/doc/$pkgname/docs/adr/0003-explicit-remote-terminal-bindings.md"
    
      73  fi
    
      74  if [[ -f docs/adr/0004-opt-in-administrative-desktop-restore.md ]]; then
    
      75    install -Dm644 docs/adr/0004-opt-in-administrative-desktop-restore.md "$pkgdir/usr/share/doc/$pkgname/docs/adr/0004-opt-in-administrative-desktop-restore.md"
    
      76  fi
    
      77  if [[ -f docs/research/lab-374-herdr-remote-restoration.md ]]; then
    
      78    install -Dm644 docs/research/lab-374-herdr-remote-restoration.md "$pkgdir/usr/share/doc/$pkgname/docs/research/lab-374-herdr-remote-restoration.md"
    
      79  fi
    
      80  install -Dm644 docs/sway-session-verification.md "$pkgdir/usr/share/doc/$pkgname/docs/sway-session-verification.md"
    
      81  install -Dm644 docs/releasing.md "$pkgdir/usr/share/doc/$pkgname/docs/releasing.md"
    
      82  install -Dm644 docs/workflow_conventions.md "$pkgdir/usr/share/doc/$pkgname/docs/workflow_conventions.md"
    
      83  install -Dm644 docs/adr/0001-sqlite-session-runtime-state.md "$pkgdir/usr/share/doc/$pkgname/docs/adr/0001-sqlite-session-runtime-state.md"
    
      84  install -Dm644 contrib/sway/50-sway-session.conf "$pkgdir/usr/share/doc/$pkgname/50-sway-session.conf"
    
      85  install -Dm644 contrib/herdr/config.toml "$pkgdir/usr/share/doc/$pkgname/contrib/herdr/config.toml"
    
      86  install -Dm644 contrib/sway-session/config.toml "$pkgdir/usr/share/doc/$pkgname/contrib/sway-session/config.toml"
    
      87  install -Dm644 contrib/codex/hooks-system.json "$pkgdir/usr/share/doc/$pkgname/contrib/codex/hooks.json"
    
      88  install -Dm644 contrib/apparmor/agent-home-guard "$pkgdir/usr/share/doc/$pkgname/contrib/apparmor/agent-home-guard"
    
      89  install -Dm755 scripts/verify-codex-boundary.sh "$pkgdir/usr/share/doc/$pkgname/scripts/verify-codex-boundary.sh"
    
      90}
    
      91

Changes since previous scan

--- PKGBUILD @ 2026-11-04 16:07
+++ PKGBUILD @ 2026-11-04 18:07
@@ -4,24 +4,26 @@
 # before verification, build and publication. Historical bootstrap placeholders
 # must never reach the AUR.
 pkgname=sway-session
-pkgver=0.10.4
-pkgrel=1
-_commit=e1dba96a46db416a47ef4540981ceb8cd530e10c
+pkgver=0.11.1
+pkgrel=2
+_commit=399e618d1b0a86375f9eb9a777ecf2dc57a55ba6
 pkgdesc="Persistent work sessions for Sway"
 arch=('x86_64' 'aarch64')
-url="https://automation.izoone.com/releases/sway-session"
+url="https://entire.com/et/marang/sway-session"
 license=('MIT')
 depends=('sway')
 makedepends=('go>=1.26.10')
 options=('!debug')
-source=("sway-session-$pkgver.tar.gz::$url/v$pkgver/sway-session-e1dba96a46db416a47ef4540981ceb8cd530e10c.tar.gz")
-sha256sums=('8febd4f503a54dae18c9a440336416c9f828a52ba89ec6b438eb3183d69d3a1b')
+source=("sway-session-$pkgver.tar.gz::https://get.izoone.com/sway-session/v$pkgver/sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6.tar.gz")
+sha256sums=('cf6cd82ddde4dcfca656d3a25d5ce5ce537270f72cd75662f92524d1052e6411')
 
 _go_build_flags=(-buildmode=pie -trimpath -buildvcs=false -mod=readonly -modcacherw)
-_go_ldflags=(-s -w -buildid= -X "main.version=$pkgver" -X "main.commit=$_commit" -X "main.modified=false" -X "github.com/marang/sway-session/internal/buildmetadata.Stamp=sway-session-build-v1|$pkgver|$_commit|false|end-sway-session-build-v1")
+# This historical source uses the old module; release preparation rebinds the
+# stamp symbol to the selected release source's module.
+_go_ldflags=(-s -w -buildid= -X "main.version=$pkgver" -X "main.commit=$_commit" -X "main.modified=false" -X "go.izoone.com/sway-session/internal/buildmetadata.Stamp=sway-session-build-v1|$pkgver|$_commit|false|end-sway-session-build-v1")
 
 build() {
-  cd "sway-session-e1dba96a46db416a47ef4540981ceb8cd530e10c"
+  cd "sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6"
   export GOCACHE="$srcdir/go-build"
   export GOMODCACHE="$srcdir/go-mod"
   export GOTOOLCHAIN=local
@@ -30,7 +32,7 @@
 }
 
 check() {
-  cd "sway-session-e1dba96a46db416a47ef4540981ceb8cd530e10c"
+  cd "sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6"
   export GOCACHE="$srcdir/go-build"
   export GOMODCACHE="$srcdir/go-mod"
   export GOTOOLCHAIN=local
@@ -39,7 +41,7 @@
 }
 
 package() {
-  cd "sway-session-e1dba96a46db416a47ef4540981ceb8cd530e10c"
+  cd "sway-session-399e618d1b0a86375f9eb9a777ecf2dc57a55ba6"
   install -Dm755 sway-session "$pkgdir/usr/bin/sway-session"
   install -Dm644 contrib/completions/bash/sway-session "$pkgdir/usr/share/bash-completion/completions/sway-session"
   install -Dm644 contrib/completions/zsh/_sway-session "$pkgdir/usr/share/zsh/site-functions/_sway-session"

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-04 18:07:34	Medium	1
2026-11-04 16:07:14	Clean	0
2026-11-03 18:05:30	Clean	0
2026-11-01 18:01:05	Clean	0
2026-10-27 15:48:05	Clean	0
2026-10-24 21:41:28	Clean	0
2026-10-24 15:40:54	Clean	0
2026-10-16 17:16:11	Clean	0
2026-10-16 15:16:11	Clean	0
2026-10-10 00:12:40	Clean	0
2026-10-09 22:12:40	Clean	0
2026-10-09 18:12:17	Clean	0
2026-10-09 16:11:33	Clean	0
2026-10-07 16:05:57	Clean	0
2026-10-05 23:40:58	Clean	0
2026-09-27 21:19:50	Clean	0
2026-09-27 01:16:09	Clean	0
2026-09-20 00:25:31	Clean	0
2026-09-19 07:30:30	Low	1
2026-09-19 01:29:45	Low	1