grok-build

maintainer VVL · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt binaries from the official xAI domain (x.ai), which is the legitimate vendor; despite the non-whitelisted host, the source is trustworthy and the binaries are checksummed, limiting supply-chain risk to low.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt binaries from the official xAI domain (x.ai), which is the legitimate vendor; despite the non-whitelisted host, the source is trustworthy and the binaries are checksummed, limiting supply-chain risk to low.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source_x86_64=("grok-$pkgver-x86_64::https://x.ai/cli/grok-${pkgver}-linux-x86_64")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Vladislav Minakov <v@minakov.pro>
    
      2
    
      3pkgname=grok-build
    
      4pkgver=0.2.117
    
      5pkgrel=1
    
      6pkgdesc="Grok CLI - command line interface for xAI's Grok"
    
      7arch=('x86_64' 'aarch64')
    
      8url="https://x.ai/cli"
    
      9license=('LicenseRef-xAI-Grok-CLI')
    
      10provides=('grok')
    
      11conflicts=('grok')
    
      12options=('!strip')
    
      13source_x86_64=("grok-$pkgver-x86_64::https://x.ai/cli/grok-${pkgver}-linux-x86_64")
    
      14source_aarch64=("grok-$pkgver-aarch64::https://x.ai/cli/grok-${pkgver}-linux-aarch64")
    
      15sha512sums_x86_64=('d443293fbb396fafb1c72ac8d7ca8f09df1c9bc1052eb68fe11e13aa9d098d955d3f1e3774e2d248fc8fa7754df464799df0afadebbf6e6bc03ad5c2faa4e0b0')
    
      16sha512sums_aarch64=('3aaadf7f5afc90a0a80d99066799dbfc107bcef154f7d14c767adf5de25438e9551a3859645b5e71b6128dbcc2ef34364de174ab4c5ee65a796fab5e4c8afbcb')
    
      17
    
      18package() {
    
      19  local _bin
    
      20  case "$CARCH" in
    
      21    aarch64) _bin="grok-$pkgver-aarch64" ;;
    
      22    *)       _bin="grok-$pkgver-x86_64" ;;
    
      23  esac
    
      24  install -Dm755 "$_bin" "${pkgdir}/usr/bin/grok"
    
      25}
    
      26

Changes since previous scan

--- PKGBUILD @ 2026-07-31 00:14
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,7 +1,7 @@
 # Maintainer: Vladislav Minakov <v@minakov.pro>
 
 pkgname=grok-build
-pkgver=0.2.112
+pkgver=0.2.117
 pkgrel=1
 pkgdesc="Grok CLI - command line interface for xAI's Grok"
 arch=('x86_64' 'aarch64')
@@ -10,12 +10,17 @@
 provides=('grok')
 conflicts=('grok')
 options=('!strip')
-source_x86_64=("grok-$pkgver::https://x.ai/cli/grok-${pkgver}-linux-x86_64")
+source_x86_64=("grok-$pkgver-x86_64::https://x.ai/cli/grok-${pkgver}-linux-x86_64")
 source_aarch64=("grok-$pkgver-aarch64::https://x.ai/cli/grok-${pkgver}-linux-aarch64")
-sha512sums_x86_64=('23a2b4c8b55f7d165b085e705d647f78b37986de192f6e2b554478fe3826b4d7afe1124cab65b8b478d61f9c8b35b6a180c8fbaedf47dfc7f2875201a33dab3c')
-sha512sums_aarch64=('11caa6171329994d83c40bce600977b0cca0ee419958d5792bdfeea7bf60f1993dd3868aa067abb8ce352dbf7e7510cf9b8e63e522cf7beaf8fd199738178fb5')
+sha512sums_x86_64=('d443293fbb396fafb1c72ac8d7ca8f09df1c9bc1052eb68fe11e13aa9d098d955d3f1e3774e2d248fc8fa7754df464799df0afadebbf6e6bc03ad5c2faa4e0b0')
+sha512sums_aarch64=('3aaadf7f5afc90a0a80d99066799dbfc107bcef154f7d14c767adf5de25438e9551a3859645b5e71b6128dbcc2ef34364de174ab4c5ee65a796fab5e4c8afbcb')
 
 package() {
-  install -Dm 755 grok-$pkgver "${pkgdir}/usr/bin/grok"
+  local _bin
+  case "$CARCH" in
+    aarch64) _bin="grok-$pkgver-aarch64" ;;
+    *)       _bin="grok-$pkgver-x86_64" ;;
+  esac
+  install -Dm755 "$_bin" "${pkgdir}/usr/bin/grok"
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 21:18:45	MEDIUM	1
2026-07-31 00:14:10	CLEAN	2
2026-07-30 11:14:12	MEDIUM	1
2026-07-25 00:13:44	CLEAN	2
2026-07-24 15:27:57	MEDIUM	1
2026-07-22 00:29:32	CLEAN	2
2026-07-21 21:18:19	MEDIUM	1
2026-07-17 00:06:16	CLEAN	2
2026-07-16 13:51:33	MEDIUM	1
2026-07-14 00:09:48	CLEAN	2
2026-07-13 11:41:15	MEDIUM	1
2026-07-13 00:19:36	LOW	2
2026-07-12 00:27:26	LOW	2
2026-07-11 00:25:18	LOW	2
2026-07-10 00:20:30	LOW	2
2026-07-09 07:30:23	MEDIUM	1
2026-07-09 00:22:38	LOW	2