testdisk-git

LOW

maintainer FabioLolix 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The source is a git clone from the project's official host (git.cgsecurity.org), which is plausibly owned by the project maintainer; building from source is normal AUR practice, even if the host is not on a standard whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a git clone from the project's official host (git.cgsecurity.org), which is plausibly owned by the project maintainer; building from source is normal AUR practice, even if the host is not on a standard whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:32 source=("git+https://git.cgsecurity.org/testdisk.git")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Fabio 'Lolix' Loli <fabio.loli@disroot.org> -> https://github.com/FabioLolix
    
      2
    
      3pkgname=testdisk-git
    
      4pkgver=7.2.r64.g0aa4bc2b
    
      5pkgrel=2
    
      6pkgdesc="Checks and undeletes partitions + PhotoRec, signature based recovery tool"
    
      7arch=(x86_64 aarch64)
    
      8url="https://www.cgsecurity.org/index.html?testdisk.html"
    
      9license=(GPL-2.0-or-later)
    
      10depends=(
    
      11    e2fsprogs
    
      12    glibc
    
      13    #hicolor-icon-theme
    
      14    libgcc
    
      15    libjpeg-turbo
    
      16    libntfs-3g
    
      17    libstdc++
    
      18    ncurses
    
      19    #qt6-base
    
      20    zlib
    
      21    )
    
      22makedepends=(
    
      23    git
    
      24    qt6-base
    
      25    qt6-tools
    
      26    )
    
      27optdepends=(
    
      28    'qt6-base: qphotorec'
    
      29    )
    
      30provides=(testdisk)
    
      31conflicts=(testdisk)
    
      32source=("git+https://git.cgsecurity.org/testdisk.git")
    
      33sha256sums=('SKIP')
    
      34
    
      35pkgver() {
    
      36  cd "testdisk"
    
      37  git describe --long --tags | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
    
      38}
    
      39
    
      40prepare() {
    
      41  cd "testdisk"
    
      42  #./autogen.sh --force
    
      43  autoreconf -fi
    
      44}
    
      45
    
      46build() {
    
      47  cd "testdisk"
    
      48
    
      49  ./configure \
    
      50    --prefix=/usr \
    
      51    --enable-sudo
    
      52
    
      53  make
    
      54}
    
      55
    
      56package() {
    
      57  cd "testdisk"
    
      58  make DESTDIR="$pkgdir" install
    
      59}
    
      60
    
      61

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-17 00:21
@@ -1,32 +1,50 @@
 # Maintainer: Fabio 'Lolix' Loli <fabio.loli@disroot.org> -> https://github.com/FabioLolix
 
 pkgname=testdisk-git
-pkgver=7.1.r1029.g305d71ea
+pkgver=7.2.r64.g0aa4bc2b
 pkgrel=2
 pkgdesc="Checks and undeletes partitions + PhotoRec, signature based recovery tool"
-arch=(x86_64)
+arch=(x86_64 aarch64)
 url="https://www.cgsecurity.org/index.html?testdisk.html"
-license=(GPL)
-depends=(libjpeg openssl ntfs-3g)
-makedepends=(git qt5-base qt5-tools)
-optdepends=('qt5-base: qphotorec')
+license=(GPL-2.0-or-later)
+depends=(
+    e2fsprogs
+    glibc
+    #hicolor-icon-theme
+    libgcc
+    libjpeg-turbo
+    libntfs-3g
+    libstdc++
+    ncurses
+    #qt6-base
+    zlib
+    )
+makedepends=(
+    git
+    qt6-base
+    qt6-tools
+    )
+optdepends=(
+    'qt6-base: qphotorec'
+    )
 provides=(testdisk)
 conflicts=(testdisk)
 source=("git+https://git.cgsecurity.org/testdisk.git")
 sha256sums=('SKIP')
 
 pkgver() {
-  cd "${srcdir}/${pkgname%-git}"
+  cd "testdisk"
   git describe --long --tags | sed 's/^v//;s/\([^-]*-g\)/r\1/;s/-/./g'
 }
 
 prepare() {
-  cd "${srcdir}/${pkgname%-git}"
-  ./autogen.sh
+  cd "testdisk"
+  #./autogen.sh --force
+  autoreconf -fi
 }
 
 build() {
-  cd "${srcdir}/${pkgname%-git}"
+  cd "testdisk"
 
   ./configure \
     --prefix=/usr \
@@ -36,7 +54,7 @@
 }
 
 package() {
-  cd "${srcdir}/${pkgname%-git}"
+  cd "testdisk"
   make DESTDIR="$pkgdir" install
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 23:11:19	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-19 18:54:17	Clean	2
2026-06-18 16:11:54	Medium	1