microsoft-edge-canary-bin
LOW
maintainer bittin
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt .deb from Microsoft's official repository (packages.microsoft.com), which is a legitimate source for Microsoft Edge;虽非白名单主机，但域名属微软官方，下载可执行文件风险较低。
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from Microsoft's official repository (packages.microsoft.com), which is a legitimate source for Microsoft Edge;虽非白名单主机，但域名属微软官方，下载可执行文件风险较低。
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Luna Jernberg <droidbittin@gmail.com>
2
3
4
_channel=canary
5
_pkgname=microsoft-edge-canary
6
pkgname=microsoft-edge-canary-bin
7
_pkgshortname=msedge-canary
8
pkgver=155.0.4269.0
9
pkgrel=1
10
_uprel=1
11
pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
12
arch=(x86_64)
13
url="https://www.microsoftedgeinsider.com/en-us/download"
14
license=(custom)
15
provides=("microsoft-edge=$pkgver")
16
conflicts=(microsoft-edge)
17
depends=(gtk3 libcups nss alsa-lib libxtst libdrm mesa libxml2-legacy)
18
makedepends=(imagemagick)
19
optdepends=('gnome-keyring: for storing passwords in GNOME keyring'
20
'gtk3: for printing'
21
'kdialog: for file dialogs in KDE'
22
'kwallet: for storing passwords in KWallet'
23
'libpipewire: WebRTC desktop sharing under Wayland'
24
'libunity: for download progress on KDE'
25
'ttf-liberation: fix fonts for some PDFs - CRBug #369991'
26
'xdg-utils')
27
options=(!strip !zipman)
28
source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
29
"$_pkgname.sh"
30
"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
31
sha256sums=('342f64230542c37b60849744e28ebe54e94595a5044fa1b8713865b1ad8a1648'
32
'94d18bb414adb7693c4234ce5d0eac1e04caf98dc197ff8247ac5e84ea42f2d1'
33
'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')
34
35
package() {
36
bsdtar -xf data.tar.xz -C "$pkgdir/"
37
38
# suid sandbox
39
chmod 4755 "$pkgdir/opt/microsoft/$_pkgshortname/msedge-sandbox"
40
41
# 256 and 24 are proper colored icons
42
for res in 128 64 48 32; do
43
magick "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_256_canary.png" \
44
-resize "${res}x${res}" \
45
"$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_canary.png"
46
done
47
for res in 22 16; do
48
magick "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_24_canary.png" \
49
-resize "${res}x${res}" \
50
"$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_canary.png"
51
done
52
53
# copy icons where FHS expects them
54
for res in 16 22 24 32 48 64 128 256; do
55
install -Dm644 "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_canary.png" \
56
"$pkgdir/usr/share/icons/hicolor/${res}x${res}/apps/$_pkgname.png"
57
done
58
59
# User flag aware launcher
60
install -Dm0755 microsoft-edge-canary.sh "$pkgdir/usr/bin/$_pkgname"
61
62
install -Dm0644 'Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf' "$pkgdir/usr/share/licenses/$pkgname/LICENSE.pdf"
63
rm -r "$pkgdir/etc/cron.daily/" "$pkgdir/opt/microsoft/$_pkgshortname/cron/"
64
rm "$pkgdir/opt/microsoft/$_pkgshortname/"product_logo_*.png
65
}
66
67
68
Changes since previous scan
--- PKGBUILD @ 2026-09-11 00:19+++ PKGBUILD @ 2026-09-17 00:27@@ -5,7 +5,7 @@ _pkgname=microsoft-edge-canary pkgname=microsoft-edge-canary-bin _pkgshortname=msedge-canary-pkgver=153.0.4215.0+pkgver=155.0.4269.0 pkgrel=1 _uprel=1 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"@@ -28,7 +28,7 @@ source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb" "$_pkgname.sh" "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")-sha256sums=('1f22ec73227f5220063b4d02451abdc49c65875a98d524f2b41704496588e89c'+sha256sums=('342f64230542c37b60849744e28ebe54e94595a5044fa1b8713865b1ad8a1648' '94d18bb414adb7693c4234ce5d0eac1e04caf98dc197ff8247ac5e84ea42f2d1' 'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e') Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 23:24:19 | Medium | 1 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 15:22:58 | Medium | 1 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |