goresym-bin (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package downloads a prebuilt binary from the official GitHub releases of a legitimate security tool, which is normal for this type of software; the source is verifiable, and no malicious behavior is present.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1# Maintainer: Yakov Till <yakov.till@gmail.com>
    
      2
    
      3pkgname=goresym-bin
    
      4pkgver=3.4.1
    
      5pkgrel=1
    
      6pkgdesc='Go symbol recovery tool'
    
      7# Upstream publishes only an x86-64 Linux build.
    
      8arch=('x86_64')
    
      9url='https://github.com/mandiant/GoReSym'
    
      10license=('MIT')
    
      11provides=('goresym')
    
      12conflicts=('goresym')
    
      13options=('!debug')
    
      14
    
      15source=("goresym-${pkgver}.zip::${url}/releases/download/v${pkgver}/GoReSym-linux.zip"
    
      16        "LICENSE-${pkgver}::${url}/raw/v${pkgver}/LICENSE")
    
      17sha256sums=('a557124857f95a589f8ce3525119c2d18c7c7fc7c4225c92ff94e3effb38748d'
    
      18            'd7341d45c966aa10eba9d7f31bedb95db370acaf928fcaafdaa51ad29a0217b0')
    
      19
    
      20latestver() {
    
      21    gh api --paginate repos/mandiant/GoReSym/releases \
    
      22        --jq '.[] | select(.prerelease == false and .draft == false) | .tag_name' \
    
      23    | sed -nE 's/^v([0-9]+(\.[0-9]+)*)$/\1/p' | sort -V | tail -1
    
      24}
    
      25
    
      26package() {
    
      27    install -Dm755 GoReSym "${pkgdir}/usr/bin/goresym"
    
      28    install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      29
    
      30    # Static executables get only --strip-debug from makepkg, which leaves .symtab and
    
      31    # .strtab behind; Go needs neither at runtime.
    
      32    strip --strip-unneeded "${pkgdir}/usr/bin/goresym"
    
      33}
    
      34

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-01 00:21:48	Clean	2
2026-10-31 21:59:05	Low	1