arch_agent/aur-shield
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15 Commits 1 Branch 0 Tags
054db0153f723819dcda648cc4eac3b7c9b254fc
Commit Graph

4 Commits

Author SHA1 Message Date
arch_agent 054db0153f fix: /api/scan returns scan_only flag + -S flag handling in client 
- server.py: /api/scan now includes scan_only in response
- client: -S <pkg> flag properly stripped (was treated as package name)
- client: detects scan_only from scan response to decide local vs repo
 2026-08-04 11:42:55 +02:00
arch_agent f015092b1f feat: scan-only server mode + local build on client 
Server:
- config: server.scan_only flag (default: false)
- /api/build returns scan_only=true without building when enabled
- /api/status reports scan_only mode

Client (safe-yay):
- Detects server scan_only from API response
- Scan-only server: builds locally with yay/paru after clean scan
- Full server: installs from pacman repo as before
- --noinstall flag for scan-only without build (was --scan-only)
- Suspicious: prompts for local build or repo install depending on server mode
 2026-08-04 10:34:34 +02:00
arch_agent 7f46bc8f9a feat: IOC pre-check via public threat intel (AegisAUR integration) 
- ioc_fetcher.py: fetches from HedgeDoc, Atomic Arch Gist, Arch Security
  Tracker, AUR RPC orphan detection (concurrent)
- scanner.py: IOC pre-check before LLM scan — known malicious packages
  get instant MALICIOUS verdict without LLM cost
- typosquatting check with Levenshtein distance
- server.py: API returns ioc_matches + typosquat_matches
- README: threat intel sources documented

Sources ported from AegisAUR (Rust) to Python.
 2026-08-04 09:39:53 +02:00
arch_agent adee5dfc78 aur-shield v0.1.0: AI-powered AUR firewall 
- FastAPI server with scan/build/repo endpoints
- LLM scanner (Ollama) with regex pre-scan
- makepkg/devtools builder with chroot isolation
- Scan cache with TTL + PKGBUILD hash
- Client installer + safe-yay wrapper
- Docs + config example
 2026-08-04 09:35:35 +02:00