twg-cli-bin

MEDIUM
maintainer boiko 1 votes scanned 2026-10-19 05:23:55.891510
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:22 source_x86_64=("twg-linux-x64-v${pkgver}::https://teamwork-graph.atlassian.com/cli/twg-linux-x64-v${pkgver}" "bun-linux-x64-baseline-v${_bunver}.zip::https://github.com/oven-sh/bun/releases/download/bun-v${_bunver}/bun-linux-x64-baseline.zip")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Mike Boiko <mike@boiko.ca>
2
3pkgname=twg-cli-bin
4pkgver=1.3.8
5pkgrel=1
6pkgdesc='Atlassian Teamwork Graph CLI (baseline-compatible prebuilt binary)'
7arch=('x86_64' 'aarch64')
8url='https://developer.atlassian.com/cloud/twg-cli/'
9license=('Apache-2.0')
10depends=('glibc')
11makedepends=('python')
12provides=('twg-cli')
13conflicts=('twg' 'twg-cli')
14options=('!strip' '!debug')
15
16_bunver=1.4.2
17
18source=(
19 'twg-baseline-patcher.py'
20 'twg-cli-LICENSE::https://raw.githubusercontent.com/atlassian/twg-cli/main/LICENSE'
21)
22source_x86_64=("twg-linux-x64-v${pkgver}::https://teamwork-graph.atlassian.com/cli/twg-linux-x64-v${pkgver}" "bun-linux-x64-baseline-v${_bunver}.zip::https://github.com/oven-sh/bun/releases/download/bun-v${_bunver}/bun-linux-x64-baseline.zip")
23source_aarch64=("twg-linux-arm64-v${pkgver}::https://teamwork-graph.atlassian.com/cli/twg-linux-arm64-v${pkgver}")
24
25sha256sums=(
26 '3f655ca11770a6194f728f8fe52a37efb00c033a83863e0f76975518367f8545'
27 '007879788b4d4a258cf924e4177a9f4f808b4aec5c2fd6ac65c09b526c07177f'
28)
29sha256sums_x86_64=(
30 'c9f59f80ea63dec4a91b742717650af97629f5773cd63aee97bc4cabd2117361'
31 'c678040f14fe0440eb839d37cbd0ce4c051a32da72806ac97de6a6aab6bf728f'
32)
33sha256sums_aarch64=('4d2c67ab5ebc2fb83fc82db6f688d1e986ba44524278a8a4d442fbd747a01bfa')
34
35prepare() {
36 if [[ "$CARCH" == x86_64 ]]; then
37 python "$srcdir/twg-baseline-patcher.py" \
38 "$srcdir/twg-linux-x64-v${pkgver}" \
39 "$srcdir/bun-linux-x64-baseline-v${_bunver}.zip" \
40 "$srcdir/twg-linux-x64-v${pkgver}-baseline"
41 fi
42}
43
44package() {
45 local binary
46
47 if [[ "$CARCH" == x86_64 ]]; then
48 binary="twg-linux-x64-v${pkgver}-baseline"
49 else
50 binary="twg-linux-arm64-v${pkgver}"
51 fi
52
53 install -Dm755 "$srcdir/$binary" "$pkgdir/usr/bin/twg"
54 install -Dm644 "$srcdir/twg-cli-LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
55}
56

Changes since previous scan

--- PKGBUILD @ 2026-10-15 00:28
+++ PKGBUILD @ 2026-10-19 05:23
@@ -1,7 +1,7 @@
# Maintainer: Mike Boiko <mike@boiko.ca>
pkgname=twg-cli-bin
-pkgver=1.3.6
+pkgver=1.3.8
pkgrel=1
pkgdesc='Atlassian Teamwork Graph CLI (baseline-compatible prebuilt binary)'
arch=('x86_64' 'aarch64')
@@ -27,10 +27,10 @@
'007879788b4d4a258cf924e4177a9f4f808b4aec5c2fd6ac65c09b526c07177f'
)
sha256sums_x86_64=(
- 'ac8ef5cdfa361baf1ff05d1d0f874447cc9562e620dd9aafdeef5ac2913a3778'
+ 'c9f59f80ea63dec4a91b742717650af97629f5773cd63aee97bc4cabd2117361'
'c678040f14fe0440eb839d37cbd0ce4c051a32da72806ac97de6a6aab6bf728f'
)
-sha256sums_aarch64=('a86bc3aa61366230377d6a11a1635501ea162b236ef481a80a337fcd93a12f55')
+sha256sums_aarch64=('4d2c67ab5ebc2fb83fc82db6f688d1e986ba44524278a8a4d442fbd747a01bfa')
prepare() {
if [[ "$CARCH" == x86_64 ]]; then

Scan history

Scanned at (UTC)SeverityRules
2026-10-19 05:23:55 Medium 1
2026-10-15 00:28:05 Clean 2
2026-10-14 19:20:25 Medium 1
2026-10-14 00:06:47 Medium 2
2026-10-13 00:23:45 Medium 2
2026-10-12 00:18:51 Medium 2
2026-10-11 00:26:05 Medium 2
2026-10-10 00:11:52 Medium 2
2026-10-09 00:05:33 Medium 2
2026-10-08 00:28:03 Medium 2
2026-10-07 14:05:47 Medium 2
2026-10-07 00:21:34 Low 2
2026-10-06 00:13:36 Low 2
2026-10-05 00:08:03 Low 2
2026-10-04 00:18:08 Low 2
2026-10-03 00:23:04 Low 2
2026-10-02 00:00:32 Low 2
2026-10-01 00:02:06 Low 2
2026-09-30 00:20:07 Low 2
2026-09-29 01:22:50 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion