/flatpak/yubico-authenticator/

Yubico Authenticator

YubiKey OTP and OATH authenticator

Yubico Authenticator. This Flatpak will wrap the official Linux tarball. It is not a vendor-official Flatpak.

Yubico Authenticator is Apache-2.0; this Flatpak is a redistribution, not vendor official.

yubikeyotpoathauthenticator

Accounts on desktop
Accounts on desktop

Install

flatpak --user remote-add --if-not-exists thepeoples \
  https://flatpak.thepeoples.io/thepeoples.flatpakrepo
flatpak --user install -y thepeoples io.thepeoples.YubicoAuthenticator
flatpak --user install -y thepeoples io.thepeoples.YubicoAuthenticator//7.4.1

Optional system install uses sudo flatpak remote-add --if-not-exists --system and sudo flatpak install -y --system. The //version form pins the advertised ostree branch; stable tracks the latest advertised tree.

Verify

Input scan

Pinned tarball yubico-authenticator-7.4.1-linux.tar.gz, extracted without install scripts, scanned before wrap. 2026-09-02 14:16 UTC · trivy 0.73.0 · vuln DB 2026-09-01.

Wrap

Layers this remote adds. Gate fails on CRITICAL.

none

gate pass

Vendor

In the upstream package. Not patched here.

none · 1 pkg

Full report (JSON)

Previous scans

Daily Trivy refresh. Current report plus the last 14 full scans; older copies are deleted.

ScannedVuln DBVersionWrapVendorReport
2026-09-02 14:02 UTC2026-09-017.4.1nonenoneJSON
2026-09-02 06:51 UTC2026-09-017.4.1nonenoneJSON
2026-09-02 04:58 UTC2026-09-017.4.1nonenoneJSON
2026-09-02 04:31 UTC2026-09-017.4.1nonenoneJSON
2026-09-02 03:57 UTC2026-09-017.4.1nonenoneJSON
2026-09-02 03:44 UTC2026-09-017.4.1nonenoneJSON
2026-09-02 01:42 UTC2026-09-017.4.1nonenoneJSON
2026-09-01 07:28 UTC2026-09-017.4.1nonenoneJSON
2026-09-01 06:51 UTC2026-09-017.4.1nonenoneJSON
2026-08-31 09:27 UTC2026-08-317.4.1nonenoneJSON
2026-08-31 07:28 UTC2026-08-317.4.1nonenoneJSON
2026-08-31 06:50 UTC2026-08-317.4.1nonenoneJSON
2026-08-30 07:29 UTC2026-08-307.4.1nonenoneJSON
2026-08-30 06:51 UTC2026-08-307.4.1nonenoneJSON