veeam-nosnap

maintainer ypomortsev · 0 votes · scanned 2026-08-18 00:03:42.021799

LOW

Why flagged Downloads prebuilt RPMs from repository.veeam.com, which is Veeam's own official package repository infrastructure, with sha256 checksums provided; installing vendor-supplied proprietary binaries is a trust decision but not a supply-chain attack.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): Downloads prebuilt RPMs from repository.veeam.com, which is Veeam's own official package repository infrastructure, with sha256 checksums provided; installing vendor-supplied proprietary binaries is a trust decision but not a supply-chain attack.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 source=("https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-nosnap-$pkgver-1.el10.x86_64.rpm"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yegor Pomortsev <yegor@pomortsev.com>
    
      2# Contributors: krnlsoft <krnlsoft 4t hotmail d0t it>
    
      3# Contributors: theokonos
    
      4# Contributors: Ted Sadler
    
      5# Contributors: dekart811
    
      6# Contributors: CodeImp
    
      7
    
      8pkgname=veeam-nosnap
    
      9pkgver=13.1.1.4
    
      10pkgrel=1
    
      11pkgdesc="Nosnap Veeam Agent for Linux"
    
      12arch=(x86_64)
    
      13url=https://www.veeam.com/products/downloads.html
    
      14install=${pkgname}.install
    
      15license=(custom:veeam)
    
      16depends=(ncurses lvm2 fuse mlocate)
    
      17conflicts=(veeam veeam-6)
    
      18options=(!strip)
    
      19source=("https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-nosnap-$pkgver-1.el10.x86_64.rpm"
    
      20        "https://repository.veeam.com/backup/linux/agent-13/rpm/el/10/x86_64/veeam-libs-$pkgver-1.x86_64.rpm")
    
      21sha256sums=('03bc4b4710ec650ee03ce47bf303bd51125c0de464d8385142f9b9446e7afb67'
    
      22            '90829a1d1dff15091245e1f672f40814006efdb46513631cbfe7dd804409b5c4')
    
      23noextract=("veeam-nosnap-$pkgver-1.el10.x86_64.rpm"
    
      24           "veeam-libs-$pkgver-1.x86_64.rpm")
    
      25backup=('etc/veeam/veeam.ini'
    
      26        'usr/share/veeam/lpb_scheme.sql'
    
      27        'usr/share/veeam/db_upgrade.sql'
    
      28        'usr/share/veeam/db_scheme.sql')
    
      29
    
      30package() {
    
      31  bsdtar -xf "$pkgname-$pkgver-1.el10.x86_64.rpm" -C "$pkgdir" -s /sbin/bin/ -s '|lib/systemd|usr/lib/systemd|'
    
      32  bsdtar -xf "veeam-libs-$pkgver-1.x86_64.rpm" -C "$pkgdir" -s /sbin/bin/ -s '|lib/systemd|usr/lib/systemd|'
    
      33
    
      34  sed -i -e 's|# .include fipsmodule.cnf|.include /opt/veeam/veeamagentforlinux/openssl_fips_redistributable/3.1.2/ssl/fipsmodule.cnf|' \
    
      35      "$pkgdir"/opt/veeam/veeamagentforlinux/openssl_fips_redistributable/3.1.2/ssl/openssl.cnf
    
      36
    
      37  sed -i -e 's|/var/run|/run|' -e 's|/sbin|/bin|' "$pkgdir"/usr/lib/systemd/system/veeamservice.service
    
      38
    
      39  rm -rf "$pkgdir"/usr/lib/.build-id/
    
      40
    
      41  install -dm755 "$pkgdir"/usr/share/licenses/$pkgname/
    
      42  install -Dm644 "$pkgdir"/usr/share/veeam/EULA "$pkgdir"/usr/share/licenses/$pkgname/EULA
    
      43  install -Dm644 "$pkgdir"/usr/share/veeam/3rdPartyNotices.txt "$pkgdir"/usr/share/licenses/$pkgname/3rdPartyNotices.txt
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	LOW	3
2026-08-17 00:18:29	LOW	3
2026-08-16 09:38:30	LOW	3
2026-08-16 09:32:18	MEDIUM	2