Skip to content

Implement reporting and update-security-db commands#58

Open
dharapandya85 wants to merge 1 commit intoAdmGenSameer:mainfrom
dharapandya85:feature/remote-security-sync
Open

Implement reporting and update-security-db commands#58
dharapandya85 wants to merge 1 commit intoAdmGenSameer:mainfrom
dharapandya85:feature/remote-security-sync

Conversation

@dharapandya85
Copy link

This PR fixes #19.
To check for current implementation:

To create security-db.json

python3 -m archpkg.paths

Test CLI

python3 -m archpkg install yay
python3 -m archpkg install malicious-pkg
python3 -m archpkg update-security-db
No remote data provided. Placeholder update.

To implement:

  • Remote syncing: fetch JSON from GitHub, merge with local DB(if applicable),
  • Automated weekly updated
  • PKGBUILD scanning, analyzing PKGBUILD for suspicious patterns

@AdmGenSameer AdmGenSameer requested a review from Copilot October 11, 2025 19:11
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR implements security database functionality with reporting and update commands for the archpkg tool. It adds security checking capabilities to protect users from potentially malicious packages during installation.

  • Adds security database initialization and management functionality
  • Implements CLI commands for package reporting and security database updates
  • Creates comprehensive logging and exception handling infrastructure

Reviewed Changes

Copilot reviewed 15 out of 19 changed files in this pull request and generated no comments.

Show a summary per file
File Description
archpkg/security.py Core security database class with package checking and reporting functionality
archpkg/paths.py Path utilities for XDG-compliant configuration and security database initialization
archpkg/main.py CLI entry point with install, report, and update-security-db commands
build/lib/archpkg/* Duplicate source files in build directory
archpkg/logging_config.py Comprehensive logging configuration system
archpkg/exceptions.py Exception hierarchy for error handling
archpkg/config.py Configuration constants and settings
archpkg.egg-info/* Package metadata files
Comments suppressed due to low confidence (4)

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security Check for AUR Packages (Prevent Malicious Installs)

1 participant