ibmcloud-cli

maintainer connesc · 11 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt IBM Cloud CLI binaries from an official IBM domain (cloud.ibm.com), which is trustworthy despite not being on the analyzer's whitelist; checksums are provided and the installation is transparent.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt IBM Cloud CLI binaries from an official IBM domain (cloud.ibm.com), which is trustworthy despite not being on the analyzer's whitelist; checksums are provided and the installation is transparent.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source_x86_64=("https://download.clis.cloud.ibm.com/ibm-cloud-cli/${pkgver}/binaries/IBM_Cloud_CLI_${pkgver}_linux_amd64.tgz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Cédric Connes <cedric.connes@gmail.com>
    
      2pkgname=ibmcloud-cli
    
      3pkgver=2.46.0
    
      4pkgrel=1
    
      5pkgdesc="Command line client for IBM Cloud"
    
      6arch=('x86_64' 'i686' 'aarch64')
    
      7url="https://console.bluemix.net/docs/cli/reference/ibmcloud/all_versions.html"
    
      8license=('CUSTOM')
    
      9depends=()
    
      10provides=('bluemix-cli')
    
      11conflicts=('bluemix-cli')
    
      12replaces=('bluemix-cli')
    
      13source_x86_64=("https://download.clis.cloud.ibm.com/ibm-cloud-cli/${pkgver}/binaries/IBM_Cloud_CLI_${pkgver}_linux_amd64.tgz")
    
      14source_i686=("https://download.clis.cloud.ibm.com/ibm-cloud-cli/${pkgver}/binaries/IBM_Cloud_CLI_${pkgver}_linux_386.tgz")
    
      15source_aarch64=("https://download.clis.cloud.ibm.com/ibm-cloud-cli/${pkgver}/binaries/IBM_Cloud_CLI_${pkgver}_linux_arm64.tgz")
    
      16sha256sums_x86_64=('d05696e9e6892796105a37cc2177f8239b298c6f2415eab01f6be6f413530732')
    
      17sha256sums_i686=('36ceadca3d4eecd162ae1ad7dee647a3d3dfcd51d12d6153d6cf8552c1d533cd')
    
      18sha256sums_aarch64=('c19601f5208825697aad91899d14debec97fb04d917a5d66e8b229f998a56278')
    
      19
    
      20package() {
    
      21  cd "${srcdir}/IBM_Cloud_CLI/"
    
      22
    
      23  mkdir -p "${pkgdir}/opt/ibmcloud/"
    
      24  install -D "NOTICE" "${pkgdir}/opt/ibmcloud/bin/NOTICE"
    
      25  install -D "LICENSE" "${pkgdir}/opt/ibmcloud/bin/LICENSE"
    
      26  install -D "ibmcloud" "${pkgdir}/opt/ibmcloud/bin/ibmcloud"
    
      27  install -D "autocomplete/bash_autocomplete" "${pkgdir}/opt/ibmcloud/autocomplete/bash_autocomplete"
    
      28  install -D "autocomplete/zsh_autocomplete" "${pkgdir}/opt/ibmcloud/autocomplete/zsh_autocomplete"
    
      29
    
      30  install -d "${pkgdir}/usr/bin"
    
      31
    
      32  ln -sf /opt/ibmcloud/bin/ibmcloud "${pkgdir}/opt/ibmcloud/bin/bluemix"
    
      33  ln -sf /opt/ibmcloud/bin/ibmcloud "${pkgdir}/opt/ibmcloud/bin/bx"
    
      34  ln -sf /opt/ibmcloud/bin/ibmcloud "${pkgdir}/usr/bin/bluemix"
    
      35  ln -sf /opt/ibmcloud/bin/ibmcloud "${pkgdir}/usr/bin/bx"
    
      36  ln -sf /opt/ibmcloud/bin/ibmcloud "${pkgdir}/usr/bin/ibmcloud"
    
      37
    
      38  install -d "${pkgdir}/usr/share/bash-completion/completions"
    
      39
    
      40  ln -sf /opt/ibmcloud/autocomplete/bash_autocomplete "${pkgdir}/usr/share/bash-completion/completions/ibmcloud"
    
      41
    
      42  chown -R root:root "${pkgdir}/opt/ibmcloud/"
    
      43  chmod -R 755 "${pkgdir}/opt/ibmcloud/"
    
      44
    
      45  install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/$pkgname/LICENSE"
    
      46}
    
      47

Changes since previous scan

--- PKGBUILD @ 2026-06-30 20:39
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,6 +1,6 @@
 # Maintainer: Cédric Connes <cedric.connes@gmail.com>
 pkgname=ibmcloud-cli
-pkgver=2.45.0
+pkgver=2.46.0
 pkgrel=1
 pkgdesc="Command line client for IBM Cloud"
 arch=('x86_64' 'i686' 'aarch64')
@@ -13,9 +13,9 @@
 source_x86_64=("https://download.clis.cloud.ibm.com/ibm-cloud-cli/${pkgver}/binaries/IBM_Cloud_CLI_${pkgver}_linux_amd64.tgz")
 source_i686=("https://download.clis.cloud.ibm.com/ibm-cloud-cli/${pkgver}/binaries/IBM_Cloud_CLI_${pkgver}_linux_386.tgz")
 source_aarch64=("https://download.clis.cloud.ibm.com/ibm-cloud-cli/${pkgver}/binaries/IBM_Cloud_CLI_${pkgver}_linux_arm64.tgz")
-sha256sums_x86_64=('85050e96f84722c23fb86197902cd54aade0f86b4325f59343980483d34bebaa')
-sha256sums_i686=('8df3f7b923d1c521282b526547d347b192133137f41d2cb07644b20c0d513aa4')
-sha256sums_aarch64=('a17500c066b331fc009afafd83505e6089911b417f79f429e5cb8d2be047503c')
+sha256sums_x86_64=('d05696e9e6892796105a37cc2177f8239b298c6f2415eab01f6be6f413530732')
+sha256sums_i686=('36ceadca3d4eecd162ae1ad7dee647a3d3dfcd51d12d6153d6cf8552c1d533cd')
+sha256sums_aarch64=('c19601f5208825697aad91899d14debec97fb04d917a5d66e8b229f998a56278')
 
 package() {
   cd "${srcdir}/IBM_Cloud_CLI/"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 07:34:55	MEDIUM	1
2026-06-30 20:39:37	CLEAN	2
2026-06-19 19:07:35	CLEAN	2
2026-06-18 18:55:24	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1