kiro-cli
MEDIUM
maintainer AlphaLynx
7 votes
scanned 2026-09-17 01:24:19.570146
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
source_x86_64=($pkgname-$pkgver-x86_64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-x86_64-linux.tar.zst)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: AlphaLynx <alphalynx at alphalynx dot dev>
2
3
pkgname=kiro-cli
4
pkgver=2.21.4
5
pkgrel=1
6
pkgdesc='Prompt to code to deployment in your terminal'
7
arch=(aarch64 x86_64)
8
url='https://kiro.dev/cli/'
9
# By downloading and using Kiro CLI, you agree to the following:
10
# AWS Customer Agreement: https://aws.amazon.com/agreement/
11
# AWS Intellectual Property License: https://aws.amazon.com/legal/aws-ip-license-terms/
12
# Service Terms: https://aws.amazon.com/service-terms/
13
# Privacy Notice: https://aws.amazon.com/privacy/
14
license=(LicenseRef-Kiro)
15
depends=(glibc libgcc sh)
16
conflicts=(amazon-q)
17
options=(!debug)
18
source=(Kiro-LICENSE.txt)
19
source_x86_64=($pkgname-$pkgver-x86_64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-x86_64-linux.tar.zst)
20
source_aarch64=($pkgname-$pkgver-aarch64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-aarch64-linux.tar.zst)
21
sha256sums=('1840298f83a857294aa3f5adfc85835127499df54c557d8c3df76f04a56acf55')
22
sha256sums_aarch64=('2eef8c328b5f08b73f337691ebf7352016af5c9c6bdf48c96abcc02902645b47')
23
sha256sums_x86_64=('f2ad3809eb69efcee1dec8dfa95a145fd91e4351c03744534a874583ead7b0d8')
24
b2sums=('67ddcca288e9f92ee33d5f1e56dd66164542f4f85421a0c6004f55ff94b961b8db6908b249dea65c68c048925acf11c82d0f6c24f7da3948249ecf2aa4ce3880')
25
b2sums_aarch64=('29699ad6ff30596859b7a65f5b028c5a7573b5dd90b80a4e522bc52449c3716bb7b36ae2606b64fcb7a591c99f1acc7773e78cefe7ccff6a585ccabc8add3208')
26
b2sums_x86_64=('b15b8c324d00cb15c5d36ecddfbf9f7b065188bb476a4db7d50b484a4f977a52a8a350b25cc378bb0717c99043809f46d06075330139eb78504860bf5e07662d')
27
28
prepare() {
29
cd kirocli/bin
30
sed -i 's|\$HOME/.local/bin/kiro-cli|/usr/bin/kiro-cli|g' q qchat
31
}
32
33
build() {
34
cd kirocli
35
mkdir completions
36
./bin/kiro-cli completion bash > completions/kiro-cli
37
./bin/kiro-cli completion zsh > completions/_kiro-cli
38
./bin/kiro-cli completion fish > completions/kiro-cli.fish
39
}
40
41
package() {
42
cd kirocli
43
install -Dm755 bin/kiro-cli -t "$pkgdir/usr/bin"
44
install -Dm755 bin/kiro-cli-chat -t "$pkgdir/usr/bin"
45
install -Dm755 bin/kiro-cli-term -t "$pkgdir/usr/bin"
46
install -Dm755 bin/q -t "$pkgdir/usr/bin"
47
install -Dm755 bin/q -t "$pkgdir/usr/bin"
48
49
install -Dm644 completions/kiro-cli -t "$pkgdir/usr/share/bash-completion/completions"
50
install -Dm644 completions/_kiro-cli -t "$pkgdir/usr/share/zsh/site-functions"
51
install -Dm644 completions/kiro-cli.fish -t "$pkgdir/usr/share/fish/vendor_completions.d"
52
53
install -Dm644 "$srcdir/Kiro-LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE.txt"
54
}
55
Changes since previous scan
--- PKGBUILD @ 2026-09-17 00:27+++ PKGBUILD @ 2026-09-17 01:24@@ -1,7 +1,7 @@ # Maintainer: AlphaLynx <alphalynx at alphalynx dot dev> pkgname=kiro-cli-pkgver=2.21.1+pkgver=2.21.4 pkgrel=1 pkgdesc='Prompt to code to deployment in your terminal' arch=(aarch64 x86_64)@@ -19,11 +19,11 @@ source_x86_64=($pkgname-$pkgver-x86_64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-x86_64-linux.tar.zst) source_aarch64=($pkgname-$pkgver-aarch64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-aarch64-linux.tar.zst) sha256sums=('1840298f83a857294aa3f5adfc85835127499df54c557d8c3df76f04a56acf55')-sha256sums_aarch64=('a39ed08af403eb63164b0084f6603b6ba6e0a9d5f02d6919d8d388fab8fcdefe')-sha256sums_x86_64=('14fd3a89304d5b43e1584fd7473b7438a88eb516fea61184d1d0965f42a5b112')+sha256sums_aarch64=('2eef8c328b5f08b73f337691ebf7352016af5c9c6bdf48c96abcc02902645b47')+sha256sums_x86_64=('f2ad3809eb69efcee1dec8dfa95a145fd91e4351c03744534a874583ead7b0d8') b2sums=('67ddcca288e9f92ee33d5f1e56dd66164542f4f85421a0c6004f55ff94b961b8db6908b249dea65c68c048925acf11c82d0f6c24f7da3948249ecf2aa4ce3880')-b2sums_aarch64=('f0836aef31d2a8ec419d91441fa8ac2af0671d8c827a6ee50f50e33376b47817bd7aca92b5a6b862150a76d27503653a997983216efa46ea32c9b23ee2c4aa24')-b2sums_x86_64=('1145554a7fbfce55f07c70ed4b6d61aa9b2901ac90eca8fe76cb83fd340e91cd5f0dc50dfa9a25c1c7447d2bc39c89cf470fe12cef019108c7fc6d6888e0b7e6')+b2sums_aarch64=('29699ad6ff30596859b7a65f5b028c5a7573b5dd90b80a4e522bc52449c3716bb7b36ae2606b64fcb7a591c99f1acc7773e78cefe7ccff6a585ccabc8add3208')+b2sums_x86_64=('b15b8c324d00cb15c5d36ecddfbf9f7b065188bb476a4db7d50b484a4f977a52a8a350b25cc378bb0717c99043809f46d06075330139eb78504860bf5e07662d') prepare() { cd kirocli/binScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 01:24:19 | Medium | 1 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 05:10:45 | Medium | 1 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 07:13:50 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 13:48:42 | Medium | 2 |