csky-os-linux-guide

maintainer taotieren · 0 votes · base csky-os-guide · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads PDF documentation files from a plausible project-owned host (aliyun.com is used by T-Head/OCC for distribution); these are non-executable data files, so the worst case of a swapped source is tampered documentation, not code execution.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads PDF documentation files from a plausible project-owned host (aliyun.com is used by T-Head/OCC for distribution); these are non-executable data files, so the worst case of a swapped source is tampered documentation, not code execution.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 "linux-XuanTie CPU Linux SDK介绍.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1355977/1594614304485/XuanTie+CPU+Linux+SDK%E4%BB%8B%E7%BB%8D.pdf"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgbase=csky-os-guide
    
      4pkgname=($pkgbase csky-os-linux-guide csky-os-csi-rtos-guide)
    
      5pkgver=0.0.01
    
      6pkgrel=1
    
      7arch=('x86_64')
    
      8url='https://occ.t-head.cn/community/download?id=575996958993285120'
    
      9license=('Apache')
    
      10provides=()
    
      11#conflicts=()
    
      12depends=('filesystem')
    
      13makedepends=('tar')
    
      14
    
      15source=(
    
      16        "linux-XuanTie CPU Linux SDK介绍.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1355977/1594614304485/XuanTie+CPU+Linux+SDK%E4%BB%8B%E7%BB%8D.pdf"
    
      17        "linux-Uprobe 使用指南.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/420257228264570880/1587612511285/Uprobe+%E4%BD%BF%E7%94%A8%E6%8C%87%E5%8D%97.pdf"
    
      18        "linux-Kprobe 使用指南.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/420257228264570880/1587612539508/Kprobe+%E4%BD%BF%E7%94%A8%E6%8C%87%E5%8D%97.pdf"
    
      19        "linux- perf使用说明.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/420257228264570880/1587714999937/T-HEAD+CPU+perf%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E.pdf"
    
      20        "linux-Uboot用户手册.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/420257228264570880/1587718589594/Uboot+XuanTie+CPU+%E7%94%A8%E6%88%B7%E6%89%8B%E5%86%8C.pdf"
    
      21        "linux-T-HEAD CPU调试技巧.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1355977/1606876665617/T-HEAD+CPU%E8%B0%83%E8%AF%95%E6%8A%80%E5%B7%A7.pdf"
    
      22        "CSI-API(v1.7)_User_Manual.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1621586994345/CSI-API%28v1.7%29_User_Manual.pdf"
    
      23        "CSI-RTOS_Smart_SDK(v1.7)_User_Manual.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/resource/1836682/1621587012526/CSI-RTOS_Smart_SDK%28v1.7%29_User_Manual.pdf"
    
      24        )
    
      25
    
      26sha256sums=('ced054feb2f1563f409856a9cb56d7edfeb1edc7bc50c5f894901e01d20c6a1a'
    
      27            '0b021afefaab3c20307f948c367c287ec83c77c1b1d565d0877e94eaf051f402'
    
      28            'ba2f045bc9e1457630db92e0da12eeabf060bd13c82e62ffa975c39423824a88'
    
      29            '02a82c423f764222ed3b28f7d03ecd6fb96284a19ed01cfabadfab1fa4e79420'
    
      30            'dd57f5c3e4a9898cbe70f05a85b550f258288338f152c8b9a81e8d41e6f3e14e'
    
      31            'b8db225a809323f33cb164e9bcc7e209fdfdae923f3d3dc64f06c0b5ab035bd0'
    
      32            '1fe0a2ffa9c1369189c20887bca710bca0006eafe99b7f709834eeb6e8749cd1'
    
      33            '98964115383dccc01eba8eb46dbca01b9da973c73f201532a24a0dfbb31d835c')
    
      34
    
      35noextract=()
    
      36
    
      37package_csky-os-guide() {
    
      38    pkgdesc="C-Sky OS guide"
    
      39    depends=(csky-os-linux-guide csky-os-csi-rtos-guide)
    
      40}
    
      41
    
      42package_csky-os-linux-guide() {
    
      43    pkgdesc="C-Sky OS linux guide"
    
      44    install -dm0755 "${pkgdir}/opt/t-head/${pkgname%-bin}"
    
      45
    
      46    cp -r "${srcdir}"/linux*.pdf "${pkgdir}/opt/t-head/${pkgname%-bin}"
    
      47}
    
      48
    
      49package_csky-os-csi-rtos-guide() {
    
      50    pkgdesc="C-Sky OS CSI RTOS guide"
    
      51    install -dm0755 "${pkgdir}/opt/t-head/${pkgname%-bin}"
    
      52
    
      53    cp -r "${srcdir}"/CSI*.pdf "${pkgdir}/opt/t-head/${pkgname%-bin}"
    
      54}
    
      55
    
      56# vim: ts=4 sw=4 et
    
      57

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2