What the developer wrote
Authored by Pablo Greco
Guix: fix codeberg link
What changed, and why it matters
This commit fixes a typo in two build helper scripts. The scripts were pointing to an outdated or incorrect Git repository URL for the Guix package manager (https://codeberg.org/guix.git instead of https://codeberg.org/guix/guix.git). This is a routine maintenance fix with no security implications.
No security action required. Treat as a normal build-script maintenance fix.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch updates the –url argument passed to guix time-machine in contrib/guix/guix-build and contrib/guix/guix-codesign from https://codeberg.org/guix.git to https://codeberg.org/guix/guix.git. The change is a URL path correction only; the pinned commit hash remains unchanged. There is no code logic, cryptographic, or access-control change.
Changed components
contrib/guix/guix-buildcontrib/guix/guix-codesignInspect captured patch +2 / −2
diff --git a/contrib/guix/guix-build b/contrib/guix/guix-build
index c2e7a6b..4b0131c 100755
--- a/contrib/guix/guix-build
+++ b/contrib/guix/guix-build
@@ -238,7 +238,7 @@ SOURCE_DATE_EPOCH="${SOURCE_DATE_EPOCH:-$(git -c log.showSignature=false log --f
# across time.
time-machine() {
# shellcheck disable=SC2086
- guix time-machine --url=https://codeberg.org/guix.git \
+ guix time-machine --url=https://codeberg.org/guix/guix.git \
--commit=ae03f401381e956c4c41b4cf495cbde964fa43d0 \
--cores="$JOBS" \
--keep-failed \
diff --git a/contrib/guix/guix-codesign b/contrib/guix/guix-codesign
index 2a9779a..b8b73dd 100755
--- a/contrib/guix/guix-codesign
+++ b/contrib/guix/guix-codesign
@@ -226,7 +226,7 @@ SOURCE_DATE_EPOCH="${SOURCE_DATE_EPOCH:-$(git -c log.showSignature=false log --f
# across time.
time-machine() {
# shellcheck disable=SC2086
- guix time-machine --url=https://codeberg.org/guix.git \
+ guix time-machine --url=https://codeberg.org/guix/guix.git \
--commit=ae03f401381e956c4c41b4cf495cbde964fa43d0 \
--cores="$JOBS" \
--keep-failed \
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.