microsoft-edge-canary-bin
maintainer bittin
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt .deb from Microsoft's official repository (packages.microsoft.com), which is a legitimate source for Microsoft Edge; although the host is not whitelisted, it is the vendor's own infrastructure, making the supply chain risk low.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from Microsoft's official repository (packages.microsoft.com), which is a legitimate source for Microsoft Edge; although the host is not whitelisted, it is the vendor's own infrastructure, making the supply chain risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:28
source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Luna Jernberg <droidbittin@gmail.com>
2
3
4
_channel=canary
5
_pkgname=microsoft-edge-canary
6
pkgname=microsoft-edge-canary-bin
7
_pkgshortname=msedge-canary
8
pkgver=152.0.4184.0
9
pkgrel=1
10
_uprel=1
11
pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
12
arch=(x86_64)
13
url="https://www.microsoftedgeinsider.com/en-us/download"
14
license=(custom)
15
provides=("microsoft-edge=$pkgver")
16
conflicts=(microsoft-edge)
17
depends=(gtk3 libcups nss alsa-lib libxtst libdrm mesa libxml2-legacy)
18
makedepends=(imagemagick)
19
optdepends=('gnome-keyring: for storing passwords in GNOME keyring'
20
'gtk3: for printing'
21
'kdialog: for file dialogs in KDE'
22
'kwallet: for storing passwords in KWallet'
23
'libpipewire: WebRTC desktop sharing under Wayland'
24
'libunity: for download progress on KDE'
25
'ttf-liberation: fix fonts for some PDFs - CRBug #369991'
26
'xdg-utils')
27
options=(!strip !zipman)
28
source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
29
"$_pkgname.sh"
30
"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
31
sha256sums=('8701fbb097ce298bac94b2b564d004871b1925a8c441a62cdbabc3b26608f07b'
32
'94d18bb414adb7693c4234ce5d0eac1e04caf98dc197ff8247ac5e84ea42f2d1'
33
'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')
34
35
package() {
36
bsdtar -xf data.tar.xz -C "$pkgdir/"
37
38
# suid sandbox
39
chmod 4755 "$pkgdir/opt/microsoft/$_pkgshortname/msedge-sandbox"
40
41
# 256 and 24 are proper colored icons
42
for res in 128 64 48 32; do
43
magick "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_256_canary.png" \
44
-resize "${res}x${res}" \
45
"$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_canary.png"
46
done
47
for res in 22 16; do
48
magick "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_24_canary.png" \
49
-resize "${res}x${res}" \
50
"$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_canary.png"
51
done
52
53
# copy icons where FHS expects them
54
for res in 16 22 24 32 48 64 128 256; do
55
install -Dm644 "$pkgdir/opt/microsoft/$_pkgshortname/product_logo_${res}_canary.png" \
56
"$pkgdir/usr/share/icons/hicolor/${res}x${res}/apps/$_pkgname.png"
57
done
58
59
# User flag aware launcher
60
install -Dm0755 microsoft-edge-canary.sh "$pkgdir/usr/bin/$_pkgname"
61
62
install -Dm0644 'Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf' "$pkgdir/usr/share/licenses/$pkgname/LICENSE.pdf"
63
rm -r "$pkgdir/etc/cron.daily/" "$pkgdir/opt/microsoft/$_pkgshortname/cron/"
64
rm "$pkgdir/opt/microsoft/$_pkgshortname/"product_logo_*.png
65
}
66
67
68
Changes since previous scan
--- PKGBUILD @ 2026-07-29 00:25+++ PKGBUILD @ 2026-08-03 00:08@@ -5,7 +5,7 @@ _pkgname=microsoft-edge-canary pkgname=microsoft-edge-canary-bin _pkgshortname=msedge-canary-pkgver=152.0.4173.0+pkgver=152.0.4184.0 pkgrel=1 _uprel=1 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"@@ -28,7 +28,7 @@ source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb" "$_pkgname.sh" "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")-sha256sums=('11fa47483faaec7508401975aaafcbb7dc139ab2aacc061be8f56d662a151e3e'+sha256sums=('8701fbb097ce298bac94b2b564d004871b1925a8c441a62cdbabc3b26608f07b' '94d18bb414adb7693c4234ce5d0eac1e04caf98dc197ff8247ac5e84ea42f2d1' 'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e') Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 11:11:22 | MEDIUM | 1 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 09:27:42 | MEDIUM | 1 |
| 2026-06-20 16:03:41 | CLEAN | 2 |
| 2026-06-20 00:50:07 | MEDIUM | 2 |
| 2026-06-20 00:18:46 | MEDIUM | 1 |
| 2026-06-19 23:51:18 | CLEAN | 2 |
| 2026-06-19 19:07:35 | LOW | 2 |
| 2026-06-18 16:11:54 | MEDIUM | 1 |