@nuu-maan/omarchy-digup

DigUp v0.1.0

Search your files by what's in them: photos, PDFs, recordings, videos and code. Runs DigUp's EmbeddingGemma 2 search on your machine.

Verified

Start with the source

Version 0.1.0

Read the code and installation instructions at this exact commit.

Inspect source

Source commit70e88deb2d9b084e28d0123d2480fbc1b2cf5a5b

The standard Omarchy install command follows upstream code and may install a different commit. Check the repository’s instructions before installing.

Release history

1 release

Published versions of DigUp
Version	Published	Publisher	Record
v0.1.0	Oct 15, 2026	Nuu-maan	Receipt ↗

What was checked

Manifest structure, declared files, QML parsing, repository identity and bounded source analysis passed at this commit.

APPROVED

This exact commit was reviewed according to the registry checklist.

Verified version 0.1.0: 70e88deb2d9b084e28d0123d2480fbc1b2cf5a5b
Reviewed by Nuu-maan on Oct 15, 2026.

Security capabilities

Last scan: Oct 15, 2026

Automated security analysis is not a guarantee that a plugin is safe. “No match” means the scanner did not recognize a pattern; it is not proof of absence.

network · 1 matches

bin/install-helper:6 ↗url="https://github.com/ARahim3/DigUp/releases/download/v$version/DigUp_${version}_amd64.AppImage"

shell · 3 matches

bin/digup:1 ↗#!/bin/bash

bin/digup-open:1 ↗#!/bin/bash

bin/install-helper:1 ↗#!/bin/bash

process · 9 matches

Service.qml:191 ↗Process {

Service.qml:214 ↗Process {

Service.qml:229 ↗Process {

bin/digup:4 ↗[[ -n $candidate && -x $candidate ]] && exec "$candidate" "$@"

bin/digup-open:7 ↗if command -v uwsm-app >/dev/null; then exec uwsm-app -- "$@"; else exec "$@"; fi

bin/digup-open:39 ↗code | cursor | codium) exec omarchy-launch-editor --goto "$path:$loc" ;;

bin/digup-open:40 ↗zed | hx | helix | subl | sublime_text) exec omarchy-launch-editor "$path:$loc" ;;

bin/digup-open:41 ↗*) exec omarchy-launch-editor "+$loc" "$path" ;;

tests/model.test.js:109 ↗process.exit(failed ? 1 : 0)

filesystemRead · 1 matches

Service.qml:178 ↗FileView {

filesystemWrite · 4 matches

Service.qml:185 ↗setText(JSON.stringify(defaults, null, 2) + "\n")

bin/install-helper:10 ↗trap 'rm -rf "$work"' EXIT

bin/install-helper:18 ↗rm -rf "$target"

bin/install-helper:19 ↗mkdir -p "$(dirname "$target")"

environment · 35 matches

Service.qml:10 ↗readonly property string home: Quickshell.env("HOME")

bin/digup:3 ↗for candidate in "${DIGUP_HELPER:-}" "$HOME/.local/share/digup/helper/digup" /usr/lib/DigUp/helper/digup; do

bin/digup:4 ↗[[ -n $candidate && -x $candidate ]] && exec "$candidate" "$@"

bin/digup-open:14 ↗case $c in [a-zA-Z0-9/._~-]) out+=$c ;; *) printf -v c '%%%02X' "'$c"; out+=$c ;; esac

bin/digup-open:16 ↗echo "$out"

bin/digup-open:20 ↗((loc > 0)) || launch xdg-open "$path"

bin/digup-open:22 ↗*Evince*) launch evince --page-index="$loc" "$path" ;;

bin/digup-open:23 ↗*Papers*) launch papers --page-index="$loc" "$path" ;;

bin/digup-open:24 ↗*zathura*) launch zathura --page="$loc" "$path" ;;

bin/digup-open:25 ↗*okular*) launch okular --page "$loc" "$path" ;;

bin/digup-open:26 ↗*) launch xdg-open "$path" ;;

bin/digup-open:31 ↗command -v mpv >/dev/null || launch xdg-open "$path"

downloads · 3 matches

Service.qml:231 ↗command: [root.digup, "download-model"]

bin/install-helper:6 ↗url="https://github.com/ARahim3/DigUp/releases/download/v$version/DigUp_${version}_amd64.AppImage"

bin/install-helper:13 ↗curl -fL --progress-bar -o "$work/DigUp.AppImage" "$url"

downloadExecution · No match

obfuscation · No match

credentials · No match

Automated validation details

Static pattern analysis and qmllint parsing. Up to 12 evidence samples per capability; all matching lines counted. Absence of a match does not establish absence of a capability.

Search.qml: parsed, 1314 diagnostics. Static parser only; Omarchy imports may be unavailable.
Service.qml: parsed, 127 diagnostics. Static parser only; Omarchy imports may be unavailable.

Manifest at this commit

{
  "schemaVersion": 1,
  "id": "io.github.nuu-maan.digup",
  "name": "DigUp",
  "version": "0.1.0",
  "author": "nuu-maan",
  "license": "MIT",
  "description": "Search your files by what's in them: photos, PDFs, recordings, videos and code. Runs DigUp's EmbeddingGemma 2 search on your machine.",
  "kinds": [
    "service",
    "overlay"
  ],
  "keepLoaded": true,
  "entryPoints": {
    "service": "Service.qml",
    "overlay": "Search.qml"
  }
}

Review history

APPROVE · v0.1.0

Nuu-maan · Oct 15, 2026
70e88deb2d9b084e28d0123d2480fbc1b2cf5a5b

Reviewed source at 70e88de. The plugin is a QML front end for DigUp's local search engine: a service that runs digup search-service, index-service and download-model, and an overlay panel. External downloads are explained and pinned: install-helper fetches DigUp v0.7.0-beta.1 from its GitHub release and verifies a SHA-256; the model downloads once on first start. Shell use is limited to opening results (xdg-open, PDF viewers, mpv, the Omarchy editor, dbus-send, wl-copy). The only deletion is install-helper replacing its own folder in ~/.local/share/digup/helper. No credential access or network use beyond those downloads. Note: the reviewer is also the plugin's author.

Security advisory recommendation: Needs about 1 GB: DigUp's engine (~140 MB) and the EmbeddingGemma 2 model (865 MB). The first pass over a large photo library takes a while on CPU.

Audit record ↗

Report this plugin

Service.qml: process execution, privilege escalation, or network access; inspect source

These checks do not include runtime testing or a full dependency audit. Plugins run with your user permissions. Read the verification policy.

Manifest SHA-256 digest

636ba18e573586129f03b6cf482543f02c04b6f8d2999be3b6ea693dc4ba70e1

DigUp v0.1.0

Start with the source

Release history

What was checked

APPROVED

Security capabilities

Review history

Review this plugin