aws-cli-bin
LOW
maintainer nsyntych
19 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads prebuilt AWS CLI binaries and completion scripts from official AWS domains (awscli.amazonaws.com, raw.githubusercontent.com); while the host is not whitelisted, the sources are from the project's official infrastructure, and the binaries are signed and verified via PGP, making the risk low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt AWS CLI binaries and completion scripts from official AWS domains (awscli.amazonaws.com, raw.githubusercontent.com); while the host is not whitelisted, the sources are from the project's official infrastructure, and the binaries are signed and verified via PGP, making the risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
source_x86_64=(${pkgname}-${pkgver}-x86_64.zip::https://awscli.amazonaws.com/awscli-exe-linux-x86_64-${pkgver}.zip)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Nick Syntychakis <nsyntych@punkops.dev>
2
3
pkgname=aws-cli-bin
4
# https://github.com/aws/aws-cli/raw/v2/CHANGELOG.rst
5
pkgver=2.36.45
6
pkgrel=1
7
epoch=1
8
pkgdesc='Unified command line interface for Amazon Web Services (Amazon provided v2 binary release)'
9
arch=(x86_64 aarch64)
10
url='https://github.com/aws/aws-cli/tree/v2'
11
license=('Apache-2.0')
12
options=(!strip !debug)
13
makedepends=('unzip')
14
depends=('less')
15
optdepends=()
16
provides=(aws-cli)
17
conflicts=(aws-cli aws-cli-v2 aws-cli-v2-bin aws-cli-git)
18
install=aws-cli-v2-bin.install
19
20
source=("aws_bash_completer::https://raw.githubusercontent.com/aws/aws-cli/${pkgver}/bin/aws_bash_completer"
21
"aws_zsh_completer.sh::https://raw.githubusercontent.com/aws/aws-cli/${pkgver}/bin/aws_zsh_completer.sh"
22
"LICENSE.txt::https://raw.githubusercontent.com/aws/aws-cli/${pkgver}/LICENSE.txt")
23
24
sha256sums=('451a681062516a0473c8764a6593b0a65b6e558bf6128899b1d5e19b258f679e'
25
'426e99f1e8cd00cce9263693d29ceac5b4834f6cf1766cd57b985a440eea2e87'
26
'9b3a0d5c384b013bfc56f2f265afdbbe5c2fb674b1d6ee54190d235f284a1af0')
27
28
source_x86_64=(${pkgname}-${pkgver}-x86_64.zip::https://awscli.amazonaws.com/awscli-exe-linux-x86_64-${pkgver}.zip)
29
source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://awscli.amazonaws.com/awscli-exe-linux-aarch64-${pkgver}.zip)
30
31
sha256sums_x86_64=('0f02381483b0a5ca127a4cb379e656a73007b346561a5e41d3249d3bc1861226')
32
sha256sums_aarch64=('a10b80249b10c8fe9d433a42ee90d34c60cf50089b7e65d45c8d75e782c921ec')
33
validpgpkeys=(
34
'FB5DB77FD5C118B80511ADA8A6310ACC4672475C' # the key mentioned on https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html
35
)
36
37
package() {
38
# Create the install dir and move the binary files there
39
mkdir -p $pkgdir/usr/local/aws-cli
40
mv aws/dist $pkgdir/usr/local/aws-cli/v2
41
42
# Install completions scripts
43
install -Dm644 aws_bash_completer $pkgdir/usr/share/bash-completion/completions/aws
44
install -Dm644 aws_zsh_completer.sh $pkgdir/usr/bin/aws_zsh_completer.sh
45
46
# Install license
47
install -Dm 644 LICENSE.txt "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
48
49
# aws and aws_completer symlinks to /usr/bin
50
ln -sf /usr/local/aws-cli/v2/aws $pkgdir/usr/bin/aws
51
ln -sf /usr/local/aws-cli/v2/aws_completer $pkgdir/usr/bin/aws_completer
52
}
53
Changes since previous scan
--- PKGBUILD @ 2026-09-16 00:03+++ PKGBUILD @ 2026-09-17 00:27@@ -2,7 +2,7 @@ pkgname=aws-cli-bin # https://github.com/aws/aws-cli/raw/v2/CHANGELOG.rst-pkgver=2.36.44+pkgver=2.36.45 pkgrel=1 epoch=1 pkgdesc='Unified command line interface for Amazon Web Services (Amazon provided v2 binary release)'@@ -28,8 +28,8 @@ source_x86_64=(${pkgname}-${pkgver}-x86_64.zip::https://awscli.amazonaws.com/awscli-exe-linux-x86_64-${pkgver}.zip) source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://awscli.amazonaws.com/awscli-exe-linux-aarch64-${pkgver}.zip) -sha256sums_x86_64=('617845f42577b8c1deba29eb5195ced529ee98241ccf4dad922745a287722af4')-sha256sums_aarch64=('42092fbf9459b4716807ffc9ffeab0a616b5eff0ceed2d59a16f977ad0d7608e')+sha256sums_x86_64=('0f02381483b0a5ca127a4cb379e656a73007b346561a5e41d3249d3bc1861226')+sha256sums_aarch64=('a10b80249b10c8fe9d433a42ee90d34c60cf50089b7e65d45c8d75e782c921ec') validpgpkeys=( 'FB5DB77FD5C118B80511ADA8A6310ACC4672475C' # the key mentioned on https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html )Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 11:22:36 | Medium | 1 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 11:19:45 | Medium | 1 |
| 2026-09-13 00:19:54 | Clean | 2 |
| 2026-09-12 11:11:46 | Medium | 1 |
| 2026-09-12 00:25:17 | Clean | 2 |
| 2026-09-11 11:22:29 | Medium | 1 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 11:20:36 | Medium | 1 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 11:19:32 | Medium | 1 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 09:59:47 | Medium | 1 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 11:57:41 | Medium | 1 |
| 2026-09-04 00:03:13 | Clean | 2 |