grok-build-bin

maintainer EriDeLee · 2 votes · scanned 2026-08-18 15:40:04.149666

MEDIUM

Why flagged One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source_x86_64=("grok-$pkgver-x86_64::https://x.ai/cli/grok-${pkgver}-linux-x86_64")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Olaf Wriggers <olaf@olwig.xyz>
    
      2# Maintainer: Eric Lee <well dot dragonfly dot aaww at mask dot me>
    
      3
    
      4pkgname=grok-build-bin
    
      5pkgver=1.0.4
    
      6pkgrel=2
    
      7pkgdesc="SpaceXAI's coding agent harness and TUI. Fullscreen, mouse interactive, extensible."
    
      8arch=(
    
      9  'x86_64' 
    
      10  'aarch64'
    
      11)
    
      12url="https://x.ai/build"
    
      13license=('Apache-2.0')
    
      14provides=('grok')
    
      15conflicts=('grok')
    
      16options=('!strip' '!debug' '!emptydirs')
    
      17
    
      18backup=('etc/grok/requirements.toml')
    
      19
    
      20source_x86_64=("grok-$pkgver-x86_64::https://x.ai/cli/grok-${pkgver}-linux-x86_64")
    
      21source_aarch64=("grok-$pkgver-aarch64::https://x.ai/cli/grok-${pkgver}-linux-aarch64")
    
      22source=(
    
      23  "LICENSE.grok::https://raw.githubusercontent.com/xai-org/grok-build/refs/heads/main/LICENSE"
    
      24  "requirements.toml"
    
      25)
    
      26
    
      27b2sums_x86_64=('79a1fa9bcace912194d15260e3cd391fc860826df2c2dc7b6abc8f3669192812f60856a2913ea5e3f5c898af7c5ec2e9bbc782e18737fe5a50f73c120710ff6e')
    
      28b2sums_aarch64=('65bf89e91d863723803c24b4a4d0292346dd7dc711d1819b413410e0f14c545ef4deb544d0515a9012273705908151d21f02ddd8e7abc1f2455333d531d6b70a')
    
      29b2sums=(
    
      30  'd71170807c24118616aa2c4a1c2927bd4408ed6a7694bb02ad007aa5fad8939d42f586d576c1fd3d4e505e0eeb715443cdadcf268750807c860eb28c23ba53fa'
    
      31  '4d37a050b4fa861b2ee076940908f4dfef7419e6297425bb3dfe6c26fcb9440b01befff1837451b9bed194ee45a3f52e30b040bd356b32a5bb178ede6aea694e'
    
      32)
    
      33
    
      34# TODO default "ultra" sandbox -> https://docs.x.ai/build/features/sandbox
    
      35# TODO restrict with explicit local grok user
    
      36
    
      37package() {
    
      38
    
      39  install -Dm755 "$srcdir/grok-$pkgver-$CARCH" "$pkgdir/usr/bin/grok"
    
      40  install -Dm644 "$srcdir/LICENSE.grok" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      41  install -Dm644 "$srcdir/requirements.toml" "$pkgdir/etc/grok/requirements.toml"
    
      42
    
      43  install -d "$pkgdir/usr/share/bash-completion/completions"
    
      44  install -d "$pkgdir/usr/share/zsh/site-functions"
    
      45  install -d "$pkgdir/usr/share/fish/vendor_completions.d"
    
      46
    
      47  "$pkgdir/usr/bin/grok" completions bash > "$pkgdir/usr/share/bash-completion/completions/grok" || true
    
      48  "$pkgdir/usr/bin/grok" completions zsh  > "$pkgdir/usr/share/zsh/site-functions/_grok" || true
    
      49  "$pkgdir/usr/bin/grok" completions fish > "$pkgdir/usr/share/fish/vendor_completions.d/grok.fish" || true
    
      50}
    
      51

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:50
+++ PKGBUILD @ 2026-08-18 15:40
@@ -1,29 +1,51 @@
+# Maintainer: Olaf Wriggers <olaf@olwig.xyz>
 # Maintainer: Eric Lee <well dot dragonfly dot aaww at mask dot me>
+
 pkgname=grok-build-bin
-pkgver=0.2.38
-pkgrel=1
-pkgdesc="Grok Build — xAI's terminal coding agent CLI"
-arch=('x86_64' 'aarch64')
-url="https://x.ai/cli"
-license=('LicenseRef-proprietary')
+pkgver=1.0.4
+pkgrel=2
+pkgdesc="SpaceXAI's coding agent harness and TUI. Fullscreen, mouse interactive, extensible."
+arch=(
+  'x86_64' 
+  'aarch64'
+)
+url="https://x.ai/build"
+license=('Apache-2.0')
 provides=('grok')
 conflicts=('grok')
 options=('!strip' '!debug' '!emptydirs')
 
-# 版本指针：curl -fsSL https://x.ai/cli/stable
-source_x86_64=("grok-${pkgver}-linux-x86_64::https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-${pkgver}-linux-x86_64")
-source_aarch64=("grok-${pkgver}-linux-aarch64::https://storage.googleapis.com/grok-build-public-artifacts/cli/grok-${pkgver}-linux-aarch64")
+backup=('etc/grok/requirements.toml')
 
-b2sums_x86_64=('680a4111f623c7282074721d8191da39e8dfe86d90888867987f1d42ca4dbea16bf9a143486b2390e9f3472e0e58a19561bac2ed549a71ac59876310f074ece1')
-b2sums_aarch64=('59cd731752a573281baf9d8e8775e7db68949965853eb6408c535cb25cee4fd490d063982befe65295d52d40c08cb871e012bce7e4dd002d0eac7c77faa70c9a')
+source_x86_64=("grok-$pkgver-x86_64::https://x.ai/cli/grok-${pkgver}-linux-x86_64")
+source_aarch64=("grok-$pkgver-aarch64::https://x.ai/cli/grok-${pkgver}-linux-aarch64")
+source=(
+  "LICENSE.grok::https://raw.githubusercontent.com/xai-org/grok-build/refs/heads/main/LICENSE"
+  "requirements.toml"
+)
+
+b2sums_x86_64=('79a1fa9bcace912194d15260e3cd391fc860826df2c2dc7b6abc8f3669192812f60856a2913ea5e3f5c898af7c5ec2e9bbc782e18737fe5a50f73c120710ff6e')
+b2sums_aarch64=('65bf89e91d863723803c24b4a4d0292346dd7dc711d1819b413410e0f14c545ef4deb544d0515a9012273705908151d21f02ddd8e7abc1f2455333d531d6b70a')
+b2sums=(
+  'd71170807c24118616aa2c4a1c2927bd4408ed6a7694bb02ad007aa5fad8939d42f586d576c1fd3d4e505e0eeb715443cdadcf268750807c860eb28c23ba53fa'
+  '4d37a050b4fa861b2ee076940908f4dfef7419e6297425bb3dfe6c26fcb9440b01befff1837451b9bed194ee45a3f52e30b040bd356b32a5bb178ede6aea694e'
+)
+
+# TODO default "ultra" sandbox -> https://docs.x.ai/build/features/sandbox
+# TODO restrict with explicit local grok user
 
 package() {
-    install -Dm755 "${srcdir}/grok-${pkgver}-linux-${CARCH}" \
-        "${pkgdir}/usr/bin/grok"
 
-    install -Dm644 /dev/stdin "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE" << 'LICENSE'
-Grok Build is proprietary software owned by xAI.
-Use is subject to xAI's Terms of Service: https://x.ai/terms-of-service
-LICENSE
+  install -Dm755 "$srcdir/grok-$pkgver-$CARCH" "$pkgdir/usr/bin/grok"
+  install -Dm644 "$srcdir/LICENSE.grok" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
+  install -Dm644 "$srcdir/requirements.toml" "$pkgdir/etc/grok/requirements.toml"
+
+  install -d "$pkgdir/usr/share/bash-completion/completions"
+  install -d "$pkgdir/usr/share/zsh/site-functions"
+  install -d "$pkgdir/usr/share/fish/vendor_completions.d"
+
+  "$pkgdir/usr/bin/grok" completions bash > "$pkgdir/usr/share/bash-completion/completions/grok" || true
+  "$pkgdir/usr/bin/grok" completions zsh  > "$pkgdir/usr/share/zsh/site-functions/_grok" || true
+  "$pkgdir/usr/bin/grok" completions fish > "$pkgdir/usr/share/fish/vendor_completions.d/grok.fish" || true
 }
 

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 15:40:04	MEDIUM	1
2026-08-18 00:03:42	CLEAN	2
2026-08-17 21:37:43	MEDIUM	1
2026-08-17 19:37:23	MEDIUM	1
2026-06-20 00:50:07	CLEAN	2
2026-06-20 00:18:46	MEDIUM	1
2026-06-19 23:51:18	MEDIUM	2
2026-06-19 19:07:35	LOW	2
2026-06-18 18:55:24	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1