kiro-cli

MEDIUM
maintainer AlphaLynx 7 votes scanned 2026-09-17 01:24:19.570146
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:19 source_x86_64=($pkgname-$pkgver-x86_64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-x86_64-linux.tar.zst)

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: AlphaLynx <alphalynx at alphalynx dot dev>
2
3pkgname=kiro-cli
4pkgver=2.21.4
5pkgrel=1
6pkgdesc='Prompt to code to deployment in your terminal'
7arch=(aarch64 x86_64)
8url='https://kiro.dev/cli/'
9# By downloading and using Kiro CLI, you agree to the following:
10# AWS Customer Agreement: https://aws.amazon.com/agreement/
11# AWS Intellectual Property License: https://aws.amazon.com/legal/aws-ip-license-terms/
12# Service Terms: https://aws.amazon.com/service-terms/
13# Privacy Notice: https://aws.amazon.com/privacy/
14license=(LicenseRef-Kiro)
15depends=(glibc libgcc sh)
16conflicts=(amazon-q)
17options=(!debug)
18source=(Kiro-LICENSE.txt)
19source_x86_64=($pkgname-$pkgver-x86_64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-x86_64-linux.tar.zst)
20source_aarch64=($pkgname-$pkgver-aarch64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-aarch64-linux.tar.zst)
21sha256sums=('1840298f83a857294aa3f5adfc85835127499df54c557d8c3df76f04a56acf55')
22sha256sums_aarch64=('2eef8c328b5f08b73f337691ebf7352016af5c9c6bdf48c96abcc02902645b47')
23sha256sums_x86_64=('f2ad3809eb69efcee1dec8dfa95a145fd91e4351c03744534a874583ead7b0d8')
24b2sums=('67ddcca288e9f92ee33d5f1e56dd66164542f4f85421a0c6004f55ff94b961b8db6908b249dea65c68c048925acf11c82d0f6c24f7da3948249ecf2aa4ce3880')
25b2sums_aarch64=('29699ad6ff30596859b7a65f5b028c5a7573b5dd90b80a4e522bc52449c3716bb7b36ae2606b64fcb7a591c99f1acc7773e78cefe7ccff6a585ccabc8add3208')
26b2sums_x86_64=('b15b8c324d00cb15c5d36ecddfbf9f7b065188bb476a4db7d50b484a4f977a52a8a350b25cc378bb0717c99043809f46d06075330139eb78504860bf5e07662d')
27
28prepare() {
29 cd kirocli/bin
30 sed -i 's|\$HOME/.local/bin/kiro-cli|/usr/bin/kiro-cli|g' q qchat
31}
32
33build() {
34 cd kirocli
35 mkdir completions
36 ./bin/kiro-cli completion bash > completions/kiro-cli
37 ./bin/kiro-cli completion zsh > completions/_kiro-cli
38 ./bin/kiro-cli completion fish > completions/kiro-cli.fish
39}
40
41package() {
42 cd kirocli
43 install -Dm755 bin/kiro-cli -t "$pkgdir/usr/bin"
44 install -Dm755 bin/kiro-cli-chat -t "$pkgdir/usr/bin"
45 install -Dm755 bin/kiro-cli-term -t "$pkgdir/usr/bin"
46 install -Dm755 bin/q -t "$pkgdir/usr/bin"
47 install -Dm755 bin/q -t "$pkgdir/usr/bin"
48
49 install -Dm644 completions/kiro-cli -t "$pkgdir/usr/share/bash-completion/completions"
50 install -Dm644 completions/_kiro-cli -t "$pkgdir/usr/share/zsh/site-functions"
51 install -Dm644 completions/kiro-cli.fish -t "$pkgdir/usr/share/fish/vendor_completions.d"
52
53 install -Dm644 "$srcdir/Kiro-LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE.txt"
54}
55

Changes since previous scan

--- PKGBUILD @ 2026-09-17 00:27
+++ PKGBUILD @ 2026-09-17 01:24
@@ -1,7 +1,7 @@
# Maintainer: AlphaLynx <alphalynx at alphalynx dot dev>
pkgname=kiro-cli
-pkgver=2.21.1
+pkgver=2.21.4
pkgrel=1
pkgdesc='Prompt to code to deployment in your terminal'
arch=(aarch64 x86_64)
@@ -19,11 +19,11 @@
source_x86_64=($pkgname-$pkgver-x86_64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-x86_64-linux.tar.zst)
source_aarch64=($pkgname-$pkgver-aarch64.tar.zst::https://prod.download.cli.kiro.dev/stable/$pkgver/kirocli-aarch64-linux.tar.zst)
sha256sums=('1840298f83a857294aa3f5adfc85835127499df54c557d8c3df76f04a56acf55')
-sha256sums_aarch64=('a39ed08af403eb63164b0084f6603b6ba6e0a9d5f02d6919d8d388fab8fcdefe')
-sha256sums_x86_64=('14fd3a89304d5b43e1584fd7473b7438a88eb516fea61184d1d0965f42a5b112')
+sha256sums_aarch64=('2eef8c328b5f08b73f337691ebf7352016af5c9c6bdf48c96abcc02902645b47')
+sha256sums_x86_64=('f2ad3809eb69efcee1dec8dfa95a145fd91e4351c03744534a874583ead7b0d8')
b2sums=('67ddcca288e9f92ee33d5f1e56dd66164542f4f85421a0c6004f55ff94b961b8db6908b249dea65c68c048925acf11c82d0f6c24f7da3948249ecf2aa4ce3880')
-b2sums_aarch64=('f0836aef31d2a8ec419d91441fa8ac2af0671d8c827a6ee50f50e33376b47817bd7aca92b5a6b862150a76d27503653a997983216efa46ea32c9b23ee2c4aa24')
-b2sums_x86_64=('1145554a7fbfce55f07c70ed4b6d61aa9b2901ac90eca8fe76cb83fd340e91cd5f0dc50dfa9a25c1c7447d2bc39c89cf470fe12cef019108c7fc6d6888e0b7e6')
+b2sums_aarch64=('29699ad6ff30596859b7a65f5b028c5a7573b5dd90b80a4e522bc52449c3716bb7b36ae2606b64fcb7a591c99f1acc7773e78cefe7ccff6a585ccabc8add3208')
+b2sums_x86_64=('b15b8c324d00cb15c5d36ecddfbf9f7b065188bb476a4db7d50b484a4f977a52a8a350b25cc378bb0717c99043809f46d06075330139eb78504860bf5e07662d')
prepare() {
cd kirocli/bin

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 01:24:19 Medium 1
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 05:10:45 Medium 1
2026-09-12 00:25:17 Medium 2
2026-09-11 00:19:22 Medium 2
2026-09-10 00:22:44 Medium 2
2026-09-09 00:04:09 Medium 2
2026-09-08 00:18:08 Medium 2
2026-09-07 07:13:50 Medium 2
2026-09-07 00:30:15 Medium 2
2026-09-06 00:17:06 Medium 2
2026-09-05 00:16:27 Medium 2
2026-09-04 00:03:13 Medium 2
2026-09-03 00:15:47 Medium 2
2026-09-02 00:02:31 Medium 2
2026-09-01 13:48:42 Medium 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion