cfnrain

CLEAN

maintainer godeater 0 votes scanned 2026-11-02 00:26:00.633185

View on AUR

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package builds from a verifiable source tarball hosted on the project's official GitHub repository with matching checksums, and there are no signs of malicious or unverifiable remote code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Bryan Childs <godeater[at]gmail[dot]com>
    
      2
    
      3pkgname=cfnrain
    
      4pkgver=1.25.4
    
      5pkgrel=1
    
      6pkgdesc='A development workflow tool for working with AWS CloudFormation'
    
      7arch=('x86_64')
    
      8url="https://github.com/awesome-foundation/cfnrain"
    
      9license=('Apache-2.0')
    
      10makedepends=('go')
    
      11source=("$pkgname-$pkgver.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz")
    
      12sha512sums=('2177007e75c8ab40b86e3a48404ff98d1cc3dd8ac2b0e21f0e663040ca481fdab45de8df59145cd3e06756b802dc03f8e8eea4df5b7f94147b4aac4aa8471c95')
    
      13b2sums=('8989a8d1ce6ce45f53a466605041d6c74f541ebfcc3f2441b66cf18694b6e12f971769a6f25dc3102c0cb4a4ba5ff006ab2487508e064e1f0b19258125cf116d')
    
      14
    
      15prepare(){
    
      16  cd "$pkgname-$pkgver"
    
      17  mkdir -p build/
    
      18}
    
      19
    
      20build() {
    
      21  cd "$pkgname-$pkgver"
    
      22  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      23  export CGO_CFLAGS="${CFLAGS}"
    
      24  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      25  export CGO_LDFLAGS="${LDFLAGS}"
    
      26  export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw -buildvcs=false"
    
      27  go build -o build ./cmd/...
    
      28}
    
      29
    
      30check() {
    
      31  cd "$pkgname-$pkgver"
    
      32  go test ./...
    
      33  go test -tags=func_test ./...
    
      34}
    
      35
    
      36package() {
    
      37  cd "$pkgname-$pkgver"
    
      38  install -Dm755 build/$pkgname "$pkgdir"/usr/bin/$pkgname
    
      39  install -Dm644 "$srcdir/$pkgname-$pkgver/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      40}
    
      41

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-02 00:26:00	Clean	2
2026-11-01 22:01:45	Low	1