kdrive-appimage

MEDIUM

maintainer openscript 3 votes scanned 2026-09-24 13:43:45.914206

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source_x86_64=("${_appimage}::https://download.storage.infomaniak.com/drive/desktopclient/kDrive-${pkgver}-amd64.AppImage")

PKGBUILD

1 offending line(s) highlighted

      1# Based on the template from https://daveparrish.net/posts/2019-11-16-Better-AppImage-PKGBUILD-template.html
    
      2# Maintainer: Robin Bühler <r plus aur at obin dot ch>
    
      3
    
      4_pkgname=kdrive
    
      5_originalpkgname=kDrive
    
      6
    
      7pkgname="${_pkgname}"-appimage
    
      8pkgver=3.8.7.1
    
      9pkgrel=1
    
      10pkgdesc="kDrive allows you to collaborate, store and share your data securely via your web browser, your mobile, your tablet or your computer."
    
      11arch=('x86_64' 'aarch64')
    
      12url="https://www.infomaniak.com/en/apps/download-kdrive"
    
      13license=('custom:Unlicense')
    
      14depends=('zlib')
    
      15options=(!strip)
    
      16_appimage="${pkgname}-${pkgver}.AppImage"
    
      17source_x86_64=("${_appimage}::https://download.storage.infomaniak.com/drive/desktopclient/kDrive-${pkgver}-amd64.AppImage")
    
      18source_aarch64=("${_appimage}::https://download.storage.infomaniak.com/drive/desktopclient/kDrive-${pkgver}-arm64.AppImage")
    
      19noextract=("${_appimage}")
    
      20sha256sums_x86_64=('8d657f0fa58a063e315ed676b4168b20d30470aa5ccb4160ae5b05fa1aaa437a')
    
      21sha256sums_aarch64=('508201f5c7c26ebae88ba3aacab1648a04d4dac6ab0bbc212acbf6b4bd719ba5')
    
      22
    
      23prepare() {
    
      24    chmod +x "${_appimage}"
    
      25    ./"${_appimage}" --appimage-extract
    
      26}
    
      27
    
      28build() {
    
      29    # Adjust .desktop so it will work outside of AppImage container
    
      30    sed -i -E "s|Exec=kDrive|Exec=env DESKTOPINTEGRATION=false /usr/bin/${_pkgname}|"\
    
      31        "squashfs-root/${_originalpkgname}_client.desktop"
    
      32    # Fix permissions; .AppImage permissions are 700 for all directories
    
      33    chmod -R a-x+rX squashfs-root/usr
    
      34}
    
      35
    
      36package() {
    
      37    # AppImage
    
      38    install -Dm755 "${srcdir}/${_appimage}" "${pkgdir}/opt/${pkgname}/${pkgname}.AppImage"
    
      39
    
      40    # Desktop file
    
      41    install -Dm644 "${srcdir}/squashfs-root/${_originalpkgname}_client.desktop"\
    
      42            "${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      43
    
      44    # Icon images
    
      45    install -dm755 "${pkgdir}/usr/share/"
    
      46    cp -a "${srcdir}/squashfs-root/usr/share/icons" "${pkgdir}/usr/share/"
    
      47
    
      48    # Symlink executable
    
      49    install -dm755 "${pkgdir}/usr/bin"
    
      50    ln -s "/opt/${pkgname}/${pkgname}.AppImage" "${pkgdir}/usr/bin/${_pkgname}"
    
      51}
    
      52

Changes since previous scan

--- PKGBUILD @ 2026-06-20 00:18
+++ PKGBUILD @ 2026-09-24 13:43
@@ -5,7 +5,7 @@
 _originalpkgname=kDrive
 
 pkgname="${_pkgname}"-appimage
-pkgver=3.8.5.2
+pkgver=3.8.7.1
 pkgrel=1
 pkgdesc="kDrive allows you to collaborate, store and share your data securely via your web browser, your mobile, your tablet or your computer."
 arch=('x86_64' 'aarch64')
@@ -17,8 +17,8 @@
 source_x86_64=("${_appimage}::https://download.storage.infomaniak.com/drive/desktopclient/kDrive-${pkgver}-amd64.AppImage")
 source_aarch64=("${_appimage}::https://download.storage.infomaniak.com/drive/desktopclient/kDrive-${pkgver}-arm64.AppImage")
 noextract=("${_appimage}")
-sha256sums_x86_64=('f1e73b77e1c8f3d19208a47c7af801b55cb6a84cddaf33e5f7bb4fbef4736402')
-sha256sums_aarch64=('335d48d417a83d9d479f694a2058cd2a5791264ca9e8c4417c160021fca64191')
+sha256sums_x86_64=('8d657f0fa58a063e315ed676b4168b20d30470aa5ccb4160ae5b05fa1aaa437a')
+sha256sums_aarch64=('508201f5c7c26ebae88ba3aacab1648a04d4dac6ab0bbc212acbf6b4bd719ba5')
 
 prepare() {
     chmod +x "${_appimage}"

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-24 13:43:45	Medium	1
2026-06-20 00:18:46	Medium	1
2026-06-19 23:51:18	Clean	2
2026-06-19 19:07:35	Low	2
2026-06-18 18:55:24	Low	2
2026-06-18 18:04:49	Low	2
2026-06-18 17:53:10	Low	2
2026-06-18 16:11:54	Medium	1