NAME
arch-audit - A utility like pkg-audit for Arch Linux.
SYNOPSIS
arch-audit [OPTION]...
DESCRIPTION
A utility like pkg-audit for Arch Linux.
Based on data from https://security.archlinux.org collected by the awesome Arch Security Team.
OPTIONS
- -q, --quiet
-
Show only vulnerable package names and their versions. Set twice to hide the versions as well
- -r, --recursive
-
Prints packages that depend on vulnerable packages and are thus potentially vulnerable as well.
Set twice to show ALL the packages that requires them
- -t, --show-testing
-
Show packages which are in the [testing] repos.
See https://wiki.archlinux.org/index.php/Official_repositories#Testing_repositories
- -u, --upgradable
-
Show only packages that have already been fixed
- -c, --show-cve
-
Print the CVE numbers
- -C, --color [WHEN]
-
Colorize the output; WHEN can be 'auto' (default if omitted), 'always', or 'never'
- -b, --dbpath [DBPATH]
-
Set an alternate database location. By default, arch-audit uses /var/lib/pacman
- -f, --format [FORMAT]
-
Specify a format to control the output. Placeholders are:
%n pkgname
%c CVEs
%v fixed version
%t type
%s severity
%r required by (only when -r is also used)
- --json
-
Print results as json object.
- --proxy [PROXY]
-
Send requests through a proxy. The format looks like 'socks5://127.0.0.1:9050'.
- --no-proxy
-
Do not use a proxy even if one is configured
- --source [SOURCE]
-
Specify the URL or file path to the security tracker json data. By default, arch-audit uses https://security.archlinux.org/all.json
- --sort [SORT]...
-
Specify how to sort the output. By default, arch-audit uses 'severity,pkgname'
Possible values are: severity, pkgname, upgradable, reverse
- -V, --version
-
Prints version information
- -h, --help
-
Prints help information
INFOS
Read more at https://wiki.archlinux.org/index.php/Arch_Security_Team
BUGS
Bugs can be reported on the bug tracker https://gitlab.archlinux.org/archlinux/arch-audit/-/issues
AUTHORS
Andrea Scarpino <[email protected]>