veeam-nosnap

LOW

maintainer ypomortsev 0 votes scanned 2026-10-02 00:00:32.890515

View on AUR

Why flagged

Downloads prebuilt RPMs from repository.veeam.com, which is Veeam's own official package repository infrastructure, with sha256 checksums provided; installing vendor-supplied proprietary binaries is a trust decision but not a supply-chain attack.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Downloads prebuilt RPMs from repository.veeam.com, which is Veeam's own official package repository infrastructure, with sha256 checksums provided; installing vendor-supplied proprietary binaries is a trust decision but not a supply-chain attack.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-nosnap-$pkgver-1.el10.x86_64.rpm"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yegor Pomortsev <yegor@pomortsev.com>
    
      2# Contributors: krnlsoft <krnlsoft 4t hotmail d0t it>
    
      3# Contributors: theokonos
    
      4# Contributors: Ted Sadler
    
      5# Contributors: dekart811
    
      6# Contributors: CodeImp
    
      7
    
      8pkgname=veeam-nosnap
    
      9pkgver=13.1.1.4
    
      10pkgrel=1
    
      11pkgdesc="Nosnap Veeam Agent for Linux"
    
      12arch=(x86_64)
    
      13url=https://www.veeam.com/products/downloads.html
    
      14install=${pkgname}.install
    
      15license=(custom:veeam)
    
      16depends=(ncurses lvm2 fuse mlocate)
    
      17conflicts=(veeam veeam-6)
    
      18options=(!strip)
    
      19source=("https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-nosnap-$pkgver-1.el10.x86_64.rpm"
    
      20        "https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-libs-$pkgver-1.x86_64.rpm")
    
      21sha256sums=('03bc4b4710ec650ee03ce47bf303bd51125c0de464d8385142f9b9446e7afb67'
    
      22            '90829a1d1dff15091245e1f672f40814006efdb46513631cbfe7dd804409b5c4')
    
      23noextract=("veeam-nosnap-$pkgver-1.el10.x86_64.rpm"
    
      24           "veeam-libs-$pkgver-1.x86_64.rpm")
    
      25backup=('etc/veeam/veeam.ini'
    
      26        'usr/share/veeam/lpb_scheme.sql'
    
      27        'usr/share/veeam/db_upgrade.sql'
    
      28        'usr/share/veeam/db_scheme.sql')
    
      29
    
      30package() {
    
      31  bsdtar -xf "$pkgname-$pkgver-1.el10.x86_64.rpm" -C "$pkgdir" -s /sbin/bin/ -s '|lib/systemd|usr/lib/systemd|'
    
      32  bsdtar -xf "veeam-libs-$pkgver-1.x86_64.rpm" -C "$pkgdir" -s /sbin/bin/ -s '|lib/systemd|usr/lib/systemd|'
    
      33
    
      34  sed -i -e 's|# .include fipsmodule.cnf|.include /opt/veeam/veeamagentforlinux/openssl_fips_redistributable/3.1.2/ssl/fipsmodule.cnf|' \
    
      35      "$pkgdir"/opt/veeam/veeamagentforlinux/openssl_fips_redistributable/3.1.2/ssl/openssl.cnf
    
      36
    
      37  sed -i -e 's|/var/run|/run|' -e 's|/sbin|/bin|' "$pkgdir"/usr/lib/systemd/system/veeamservice.service
    
      38
    
      39  rm -rf "$pkgdir"/usr/lib/.build-id/
    
      40
    
      41  install -dm755 "$pkgdir"/usr/share/licenses/$pkgname/
    
      42  install -Dm644 "$pkgdir"/usr/share/veeam/EULA "$pkgdir"/usr/share/licenses/$pkgname/EULA
    
      43  install -Dm644 "$pkgdir"/usr/share/veeam/3rdPartyNotices.txt "$pkgdir"/usr/share/licenses/$pkgname/3rdPartyNotices.txt
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2