asmcli

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

• PKGBUILD:15 source=("asmcli-${downloadver}"::"https://storage.googleapis.com/csm-artifacts/asm/asmcli_${downloadver}")

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 82%): The PKGBUILD downloads a prebuilt shell script (or binary) named 'asmcli_1.16' from a Google Cloud Storage bucket (storage.googleapis.com/csm-artifacts/asm/). While GCS is Google infrastructure, this is not the project's GitHub releases page — it is a GCS bucket that could in principle be misconfigured or have its contents replaced without a corresponding GitHub release. The artifact is installed directly as an executable at /usr/bin/asmcli with mode 755. A sha256sum is provided, which mitigates the risk of in-transit substitution, but does not protect against the upstream bucket serving a malicious artifact in the first place. Checking the official Google ASM documentation confirms that storage.googleapis.com/csm-artifacts/asm/ is indeed the canonical distribution point for asmcli (Google explicitly documents 'curl https://storage.googleapis.com/csm-artifacts/asm/asmcli_1.x > asmcli' as the install method), making this a legitimate official host rather than a personal or unofficial mirror. However, it remains a prebuilt executable from a non-GitHub-releases host with no source build, which is a genuine supply-chain concern even if it matches Google's documented install method. The medium rating is appropriate: it is not clearly malicious, but it is an executed binary from a cloud bucket rather than a source build or a verifiable GitHub release artifact.