android-riscv64-gnutls
maintainer hipersayan_x
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a tarball from the official GnuTLS upstream host (gnupg.org), which is a trusted project domain; building from official source is normal AUR packaging, so the non-whitelisted host is a false positive.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official GnuTLS upstream host (gnupg.org), which is a trusted project domain; building from official source is normal AUR packaging, so the non-whitelisted host is a false positive.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Martchus <martchus@gmx.net>
3
4
_android_arch=riscv64
5
6
pkgname=android-${_android_arch}-gnutls
7
pkgver=3.8.11
8
pkgrel=4
9
arch=('any')
10
pkgdesc="A library which provides a secure layer over a reliable transport layer (Android ${_android_arch})"
11
url="https://www.gnutls.org/"
12
license=('GPL-3.0-or-later AND LGPL-2.1-or-later')
13
groups=('android-gnutls')
14
depends=("android-${_android_arch}-libidn2"
15
"android-${_android_arch}-libtasn1"
16
"android-${_android_arch}-libunistring"
17
"android-${_android_arch}-nettle"
18
"android-${_android_arch}-p11-kit"
19
"android-${_android_arch}-zlib")
20
makedepends=('android-configure'
21
'autogen')
22
optdepends=("android-${_android_arch}-openssl: libgnutls-openssl")
23
options=(!strip !buildflags staticlibs !emptydirs)
24
source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
25
md5sums=('614a4f4131ee9d9c004830181bddccea')
26
27
build() {
28
cd "${srcdir}/gnutls-${pkgver}"
29
source android-env ${_android_arch}
30
31
android-${_android_arch}-configure \
32
--with-idn \
33
--with-brotli \
34
--with-zstd \
35
--with-tpm2 \
36
--disable-doc \
37
--disable-tests \
38
--disable-valgrind-tests \
39
--disable-full-test-suite \
40
--enable-ktls \
41
--enable-openssl-compatibility \
42
--disable-srp-authentication \
43
--disable-rpath \
44
--disable-non-suiteb-curves \
45
--disable-gtk-doc \
46
--disable-full-test-suite \
47
--disable-rpath \
48
--disable-tools \
49
--with-libiconv-prefix="${ANDROID_PREFIX}" \
50
--enable-nls \
51
--enable-cxx \
52
--without-tpm \
53
--without-tpm2
54
make $MAKEFLAGS
55
}
56
57
package() {
58
cd "${srcdir}/gnutls-${pkgver}"
59
source android-env ${_android_arch}
60
61
make DESTDIR="${pkgdir}" install
62
rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
63
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
64
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
65
66
install -vDm 644 COPYING -t "${pkgdir}/usr/share/licenses/${pkgname}/"
67
}
68
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |