trid

MEDIUM

maintainer Huulivoide 15 votes scanned 2026-09-01 17:48:51.913915

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 trid-${pkgver}.zip::http://mark0.net/download/trid.zip

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:	Jesse Jaara	<gmail.com: jesse.jaara>
    
      2# Contributor:	p2k		<uni-ulm.de: Patrick.Schneider>
    
      3
    
      4pkgname=trid
    
      5pkgver=2.48
    
      6pkgrel=2
    
      7pkgdesc="An utility designed to identify file types from their binary signatures"
    
      8arch=('any')
    
      9url="http://mark0.net/soft-trid-e.html"
    
      10license=('AGPL-3.0-only OR custom:trid-comercial')
    
      11depends=('python')
    
      12optdepends=('python-stringzilla: Use the StringZilla library for faster searches')
    
      13install=trid.install
    
      14
    
      15validpgpkeys=('B98E7F89E0EDCA59116CCDCC8DFA06F20DB12205')
    
      16
    
      17source=(trid.sh
    
      18        update-trid-defs.sh
    
      19        update-trid-defs.service
    
      20        update-trid-defs.timer
    
      21        trid-${pkgver}.zip::http://mark0.net/download/trid.zip
    
      22        trid-${pkgver}.zip.asc::http://mark0.net/download/trid.zip.asc)
    
      23b2sums=('1072675dcf8b5429c7cdc610042b70fa96d91dd6d6ff81f19326419a80df534e7520f077d4d3b0df455a72de7a4c81981f12d33f7bf7f407342052b20dcaa561'
    
      24        '80be244b955a1ee7cdb52231512453df2c97449f977fe9b84155463341aaa4416136f29a25e42bbe21916352214cd45b21e0a89980ee2fb488086d3ee3b5a618'
    
      25        '00787de3be0a3244669485022015bc1376683dceb80d18194aef9be90a8f77ee4faa4c897f1c60ec06b182bb46fd8e7ee1d27ca0f202a619cee01a4f1a1051be'
    
      26        'ad09bd81ba2855ee9a729320ebf0a1528124cc998e6af3f9bfff9524a736d05c77808c7b300f53c9632d5d420bbe9c85cb6e0bee1d32c08df1bedd336e4a98a7'
    
      27        '987e11ef15692ccbf064d6b3d309794a6ace2d587c80bb2fbfe0051ec85ec0dcad4c9f1a1a8a2bf8384e15ed4d9a19a2740fcbbf42456e16cecbf1811487ca3b'
    
      28        'SKIP')
    
      29
    
      30package() {
    
      31  cd "${srcdir}"
    
      32
    
      33  install -D -m755 trid.sh       "${pkgdir}/usr/bin/trid"
    
      34  install -D -m755 trid.py       "${pkgdir}/usr/share/trid/trid.py"
    
      35  install -D -m644 readme.txt    "${pkgdir}/usr/share/trid/README"
    
      36  
    
      37  install -d 755               "${pkgdir}/usr/share/licenses/trid"
    
      38  ln -s /usr/share/trid/README "${pkgdir}/usr/share/licenses/trid/trid-comercial"
    
      39
    
      40  install -D -m755 update-trid-defs.sh      "${pkgdir}/usr/bin/update-trid-defs"
    
      41  install -D -m644 update-trid-defs.service "${pkgdir}/usr/lib/systemd/system/update-trid-defs.service"
    
      42  install -D -m644 update-trid-defs.timer   "${pkgdir}/usr/lib/systemd/system/update-trid-defs.timer"
    
      43
    
      44  install -d -m755 "${pkgdir}/var/lib/trid"
    
      45}
    
      46
    
      47

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-01 17:48
@@ -2,13 +2,14 @@
 # Contributor:	p2k		<uni-ulm.de: Patrick.Schneider>
 
 pkgname=trid
-pkgver=2.47
-pkgrel=1
+pkgver=2.48
+pkgrel=2
 pkgdesc="An utility designed to identify file types from their binary signatures"
 arch=('any')
 url="http://mark0.net/soft-trid-e.html"
 license=('AGPL-3.0-only OR custom:trid-comercial')
 depends=('python')
+optdepends=('python-stringzilla: Use the StringZilla library for faster searches')
 install=trid.install
 
 validpgpkeys=('B98E7F89E0EDCA59116CCDCC8DFA06F20DB12205')
@@ -23,7 +24,7 @@
         '80be244b955a1ee7cdb52231512453df2c97449f977fe9b84155463341aaa4416136f29a25e42bbe21916352214cd45b21e0a89980ee2fb488086d3ee3b5a618'
         '00787de3be0a3244669485022015bc1376683dceb80d18194aef9be90a8f77ee4faa4c897f1c60ec06b182bb46fd8e7ee1d27ca0f202a619cee01a4f1a1051be'
         'ad09bd81ba2855ee9a729320ebf0a1528124cc998e6af3f9bfff9524a736d05c77808c7b300f53c9632d5d420bbe9c85cb6e0bee1d32c08df1bedd336e4a98a7'
-        '400c01abb9bda0a5fa8191b1f19eb1a4ae215860b6be32694f3620bdb068010a7ec5ee08d41d53ff593dfd0e77062e9a1d8cf3d49f90c52ca9a5daf60b90bab9'
+        '987e11ef15692ccbf064d6b3d309794a6ace2d587c80bb2fbfe0051ec85ec0dcad4c9f1a1a8a2bf8384e15ed4d9a19a2740fcbbf42456e16cecbf1811487ca3b'
         'SKIP')
 
 package() {

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-01 17:48:51	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-19 18:54:17	Clean	2
2026-06-18 16:11:54	Medium	1