android-riscv64-gnutls
LOW
maintainer hipersayan_x
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the official GnuTLS upstream host (gnupg.org), which is a trusted project domain; building from official source is normal AUR packaging, so the non-whitelisted host is a false positive.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official GnuTLS upstream host (gnupg.org), which is a trusted project domain; building from official source is normal AUR packaging, so the non-whitelisted host is a false positive.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Martchus <martchus@gmx.net>
3
4
_android_arch=riscv64
5
6
pkgname=android-${_android_arch}-gnutls
7
pkgver=3.8.11
8
pkgrel=4
9
arch=('any')
10
pkgdesc="A library which provides a secure layer over a reliable transport layer (Android ${_android_arch})"
11
url="https://www.gnutls.org/"
12
license=('GPL-3.0-or-later AND LGPL-2.1-or-later')
13
groups=('android-gnutls')
14
depends=("android-${_android_arch}-libidn2"
15
"android-${_android_arch}-libtasn1"
16
"android-${_android_arch}-libunistring"
17
"android-${_android_arch}-nettle"
18
"android-${_android_arch}-p11-kit"
19
"android-${_android_arch}-zlib")
20
makedepends=('android-configure'
21
'autogen')
22
optdepends=("android-${_android_arch}-openssl: libgnutls-openssl")
23
options=(!strip !buildflags staticlibs !emptydirs)
24
source=("https://www.gnupg.org/ftp/gcrypt/gnutls/v${pkgver%.*}/gnutls-${pkgver}.tar.xz")
25
md5sums=('614a4f4131ee9d9c004830181bddccea')
26
27
build() {
28
cd "${srcdir}/gnutls-${pkgver}"
29
source android-env ${_android_arch}
30
31
android-${_android_arch}-configure \
32
--with-idn \
33
--with-brotli \
34
--with-zstd \
35
--with-tpm2 \
36
--disable-doc \
37
--disable-tests \
38
--disable-valgrind-tests \
39
--disable-full-test-suite \
40
--enable-ktls \
41
--enable-openssl-compatibility \
42
--disable-srp-authentication \
43
--disable-rpath \
44
--disable-non-suiteb-curves \
45
--disable-gtk-doc \
46
--disable-full-test-suite \
47
--disable-rpath \
48
--disable-tools \
49
--with-libiconv-prefix="${ANDROID_PREFIX}" \
50
--enable-nls \
51
--enable-cxx \
52
--without-tpm \
53
--without-tpm2
54
make $MAKEFLAGS
55
}
56
57
package() {
58
cd "${srcdir}/gnutls-${pkgver}"
59
source android-env ${_android_arch}
60
61
make DESTDIR="${pkgdir}" install
62
rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
63
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
64
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
65
66
install -vDm 644 COPYING -t "${pkgdir}/usr/share/licenses/${pkgname}/"
67
}
68
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |