intel-opencl-sdk
maintainer batot
· 83 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a legitimate Intel SDK tarball from Intel's official download domain, used to build the package; it is not an unverifiable or swappable host despite being non-whitelisted, and the build process installs official Intel OpenCL components.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate Intel SDK tarball from Intel's official download domain, used to build the package; it is not an unverifiable or swappable host despite being non-whitelisted, and the build process installs official Intel OpenCL components.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
source=(https://registrationcenter-download.intel.com/akdlm/IRC_NAS/17205/intel_sdk_for_opencl_applications_${pkgver}.tar.gz)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: batot <archpackager@algrim.pl>
2
# Contributor: nick black <dankamongmen@gmail.com>
3
# Contributor: ava1ar <maiL@ava1ar.me>
4
# Contributor: Daniel Nagy <danielnagy at gmx de>
5
# Contributor: Nicolas Bigaouette <nbigaouette@gmail.com>
6
# Contributor: Vojtech "kralyk" Kral
7
8
pkgname=intel-opencl-sdk
9
pkgver=2020.3.494
10
pkgrel=2
11
pkgdesc="Intel SDK for OpenCL Applications"
12
arch=('x86_64')
13
url="https://software.intel.com/en-us/intel-opencl/download"
14
license=('custom:intel')
15
depends=('cpio' 'opencl-icd-loader' 'libpng12' 'opencl-headers')
16
optdepends=('intel-opencl-runtime: OpenCL runtime for Intel Core and Xeon processors')
17
source=(https://registrationcenter-download.intel.com/akdlm/IRC_NAS/17205/intel_sdk_for_opencl_applications_${pkgver}.tar.gz)
18
sha256sums=('75cc2aa08d652e5e2fddca15b9e0026b69794c97f058c19d1c8594fd57804612')
19
20
build() {
21
pwd
22
chmod 0755 ../pkg
23
echo "MAKING: ${pkgdir}/opt/intel"
24
mkdir -p "${pkgdir}/opt/intel"
25
chmod 0755 "${pkgdir}"
26
xdir="${srcdir}/intel_sdk_for_opencl_applications_${pkgver}"
27
cd "${xdir}"
28
29
#-e 's/COMPONENTS=.*/COMPONENTS=opencl_cpu_rt_meta/' \
30
# prep the silent.cfg file
31
sed -i -e 's/ACCEPT_EULA=.*/ACCEPT_EULA=accept/' \
32
-e "s#PSET_INSTALL_DIR=\(.*\)#PSET_INSTALL_DIR=${pkgdir}\1#" \
33
silent.cfg
34
35
# if run as UID 0 (as package() does), install.sh unconditionally writes to
36
# /opt/intel. If run as some other UID (and --user-mode is provided), it'll
37
# instead write to $HOME. so we change our UID, and force $HOME.
38
# doubleplusugh.
39
#export HOME="${pkgdir}"
40
./install.sh -s silent.cfg --ignore-cpu --cli-mode --user-mode
41
}
42
43
package() {
44
# FIXME set ownership
45
echo "arrrrrr"
46
}
47
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |