[Midnightbsd-cvs] [MidnightBSD/mports] 15d175: Add YARA warnings to Magus scans

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 15d175bab2ffb95ff20b528d8ee37c3c7d76b71a
      https://github.com/MidnightBSD/mports/commit/15d175bab2ffb95ff20b528d8ee37c3c7d76b71a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-15 (Mon, 15 Jun 2026)

  Changed paths:
    M Tools/lib/Magus/App/Slave/Worker.pm
    M Tools/lib/Magus/Config.pm
    M Tools/magus/config.yaml.example
    A Tools/magus/yara/mports-shell.yar
    M ports-mgmt/magus-utils/Makefile

  Log Message:
  -----------
  Add YARA warnings to Magus scans

Scan port-local Makefiles, package scripts, messages, templates, and patches with YARA during the Magus scan phase. Keep detections as scan warnings while preserving ClamAV package scan failures.

Also add security/yara as a magus-utils runtime dependency and bump the port version.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 51b447c24d3d53bdd32ebd72ac3c9d20bec4feff
      https://github.com/MidnightBSD/mports/commit/51b447c24d3d53bdd32ebd72ac3c9d20bec4feff
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-15 (Mon, 15 Jun 2026)

  Changed paths:
    M Tools/lib/Magus/App/Slave/Worker.pm
    M Tools/magus/yara/mports-shell.yar

  Log Message:
  -----------
  Extend Magus YARA script checks

Add Perl, Python, and JavaScript suspicious-pattern rules to the Magus YARA scan and include port-local helper scripts in the scan target set.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: bab5e48b75dc0cc551220c45244c2920fd755ae4
      https://github.com/MidnightBSD/mports/commit/bab5e48b75dc0cc551220c45244c2920fd755ae4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-15 (Mon, 15 Jun 2026)

  Changed paths:
    M Tools/lib/Magus/App/Slave/Worker.pm

  Log Message:
  -----------
  Add Magus source integrity scan warnings

Compare each port against its latest Git history during the scan phase and warn on source-input changes that need review, including MASTER_SITES changes, distinfo changes without version or revision bumps, DIST_SUBDIR changes, and mutable-looking GitHub tags.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: 5ef4db9f4cddd8d046ceb6f4c896b57c3ea0dfa1
      https://github.com/MidnightBSD/mports/commit/5ef4db9f4cddd8d046ceb6f4c896b57c3ea0dfa1
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-15 (Mon, 15 Jun 2026)

  Changed paths:
    M Tools/lib/Magus/App/Slave/Worker.pm
    M Tools/lib/Magus/Config.pm
    M Tools/magus/config.yaml.example
    A Tools/magus/domain-allowlist.txt

  Log Message:
  -----------
  Add Magus source domain reputation checks

Warn when MASTER_SITES domains are outside the configured source allowlist and add optional Quad9 malware-blocking DNS comparison checks for source domains during the scan phase.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: a91f042a0beed44ffc1c54d6ad292c174dd1ce97
      https://github.com/MidnightBSD/mports/commit/a91f042a0beed44ffc1c54d6ad292c174dd1ce97
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-16 (Tue, 16 Jun 2026)

  Changed paths:
    M misc/Makefile
    A misc/py-mistral-common/Makefile
    A misc/py-mistral-common/distinfo
    A misc/py-mistral-common/files/patch-pyproject.toml
    A misc/py-mistral-common/pkg-descr

  Log Message:
  -----------
  misc/py-mistral-common: add new port

Import mistral-common 1.11.0 from FreeBSD ports and register it in the misc category.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


  Commit: bd1c397ec55bcce2b188fdec5a7ecf2eac06e77b
      https://github.com/MidnightBSD/mports/commit/bd1c397ec55bcce2b188fdec5a7ecf2eac06e77b
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-17 (Wed, 17 Jun 2026)

  Changed paths:
    M devel/Makefile
    A devel/py-pydantic-extra-types/Makefile
    A devel/py-pydantic-extra-types/distinfo
    A devel/py-pydantic-extra-types/files/patch-pyproject.toml
    A devel/py-pydantic-extra-types/pkg-descr
    M textproc/Makefile
    A textproc/py-pycountry/Makefile
    A textproc/py-pycountry/distinfo
    A textproc/py-pycountry/files/patch-pyproject.toml
    A textproc/py-pycountry/pkg-descr

  Log Message:
  -----------
  devel/py-pydantic-extra-types: add new port

Import pydantic-extra-types and pycountry to satisfy mistral-common runtime dependencies.

AI-Assisted-by: OpenAI Codex <noreply at openai.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>


Compare: https://github.com/MidnightBSD/mports/compare/7c881b7bde19...bd1c397ec55b

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications