ceph-common 20.2.4-1

seededverified· maintained by pbazaah· GPL-2.0-or-later, LGPL-2.1-or-later, LGPL-3.0-or-later

Ceph Storage common libraries and dependencies

shelly install aur ceph-common --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly config.json file.

Metadata

Package base
ceph
Maintainer
pbazaah
Submitter
foxxx0
Votes
9
Popularity
0.208679
First submitted
2022-08-08 09:09
Last modified
2026-08-22 20:17
Out-of-date
no

Relations

Depends

Make dependencies

Provides

Security

Verified - no high/critical red flags - content is served.
revision 1e17d7fa6758 scanned 2026-11-05 16:16 UTC findings 24 medium

Revision scans

Revision Status Scanned Findings
1e17d7fa6758head verified 2026-11-05 16:16 24
48c36023b5f6 verified 2026-11-05 16:16 24

Head findings

medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

export CMAKE_BUILD_PARALLEL_LEVEL=$(nproc --ignore=1 || echo "4")
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

ctest -j $(nproc --ignore=1 || echo "4") \
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

mkdir -p "$(dirname "$d")"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

rmdir -p --ignore-fail-on-non-empty "$(dirname "$f")"
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

pyv=$(python -c 'import sys ; v = sys.version_info ; print("%d.%d" %(v[0], v[1]))')
medium command-substitution in PKGBUILD

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

local -i _ret=$(find "${install}" -type f,l | wc -l)
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

--token       | The API token to use when authenticating with GitHub  env:\$GITHUB_TOKEN    =$([[-n "$token" ]] && printf '<*****>' || printf '<unset>')
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

1. $(basename $0) --tag=v1.0.0 --repo github/octocat --file ./cute-kat.jpg --token=dae3re34...
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

2. GITHUB_TOKEN=4wf4dec... GITHUB_ARTIFACT=/assets/cats.json $(basename $0) --repo=github/octocat --tag=v2.0.0
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

3. $(basename $0) --tag=@ --repo github/octocat --file ./dirty_m3sszy.kitty.tar.xz:kitty.tar.xz --token f43rffe...
medium variable-indirection in scripts.gh-upload-artifact.sh

Bash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.

[[ -n "${!v}" ]] || efails+=("$v")
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

[[ -n "${efails}" ]] && emsg=$(printf 'Missing required variable(s): %s' "${efails[*]}")
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

[[ -n "${xfails}" ]] && emsg=$(printf '%s\nMissing required executable(s): %s' "$emsg" "${xfails[*]}")
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

[[ -n "$emsg" ]] && die 3 "$(printf '%s\n[INFO]: Use --help for more information' "$emsg")"
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

local GOPTS=$(getopt -o hd --long help,dry-run,repo:,tag:,file:,token: -n "gh-upload-artifact" -- "$@")
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

[[ -n "$filename" ]] || filename=$(basename $artifact)
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

GH_RESPONSE=$(mktemp)
medium risky-tool in scripts.gh-upload-artifact.sh

'curl' is invoked - this fetches/executes external code outside alpm's control.

curl "$CURL_ARGS" -o "$GH_RESPONSE" -H "$GH_AUTH" "https://api.github.com/repos/$repo/releases/$GH_TAG"
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

(( $? > 0 )) && die 1 "$(cat <(printf "Invalid repo, token or network issue!\n") $GH_RESPONSE)"
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

id=$(jq -r '.id' "$GH_RESPONSE")
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

(( $? > 0 )) && die 1 "$(cat <(printf "Failed to get release id for tag '%s' from response:\n" "$tag") $GH_RESPONSE)"
medium risky-tool in scripts.gh-upload-artifact.sh

'curl' is invoked - this fetches/executes external code outside alpm's control.

curl "$CURL_ARGS" \
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

-H "Content-Type: $(file -b --mime-type $artifact)" \
medium command-substitution in scripts.gh-upload-artifact.sh

Dynamic command construction - the effective command is computed at runtime and cannot be statically resolved.

&& die 1 "$(cat <(printf "Failed to upload $filename to $repo:\n") $GH_RESPONSE)" \

Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.

← Back to the package catalog

Connection lost

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin. Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session. Please retry or reload the page.