openocd-git

maintainer codyps · 30 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source uses git repositories from non-whitelisted hosts, but all are plausibly project-related (repo.or.cz, github.com, gitlab.zapb.de, git.savannah.nongnu.org); this is a standard AUR git package building from upstream sources, so the risk is low despite unverifiable checksums.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source uses git repositories from non-whitelisted hosts, but all are plausibly project-related (repo.or.cz, github.com, gitlab.zapb.de, git.savannah.nongnu.org); this is a standard AUR git package building from upstream sources, so the risk is low despite unverifiable checksums.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:27 "git+https://gitlab.zapb.de/libjaylink/libjaylink.git"

PKGBUILD

1 offending line(s) highlighted

      1# ex: ts=2 sts=2 sw=2 et
    
      2# Maintainer: yhfudev <yhfudev ta gmail dot com>
    
      3# Contributor: veox <veox ta wemakethings dot net>
    
      4# Contributor: Nick Østergaard <oe.nick at gmail dot com>
    
      5# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
    
      6# Contributor: Matthias Bauch <matthias.bauch@gmail.com>
    
      7# Contributor: Laszlo Papp <djszapi2 at gmail com>
    
      8# Contributor: Samuel Tardieu <sam@rfc1149.net>
    
      9
    
      10_pkgbase=openocd
    
      11pkgname=openocd-git
    
      12pkgver=0.12.0.r59.g0b6f53e94
    
      13pkgrel=1
    
      14pkgdesc="Debugging, in-system programming and boundary-scan testing for embedded target devices (git version)"
    
      15arch=('i686' 'x86_64' 'arm' 'aarch64')
    
      16url="http://openocd.org"
    
      17license=('GPL')
    
      18depends=('libftdi-compat' 'libusb-compat' 'hidapi' 'libudev.so' 'capstone' 'libjaylink')
    
      19makedepends=('git' 'automake>=1.11' 'autoconf' 'libtool' 'tcl')
    
      20options=(!strip)
    
      21provides=('openocd')
    
      22conflicts=('openocd')
    
      23
    
      24source=(
    
      25  "${pkgname}::git+https://repo.or.cz/openocd.git"
    
      26  "git+https://github.com/msteveb/jimtcl.git"
    
      27  "git+https://gitlab.zapb.de/libjaylink/libjaylink.git"
    
      28  "git+https://git.savannah.nongnu.org/git/git2cl.git"
    
      29
    
      30)
    
      31md5sums=('SKIP'
    
      32         'SKIP'
    
      33         'SKIP'
    
      34         'SKIP')
    
      35sha1sums=('SKIP'
    
      36          'SKIP'
    
      37          'SKIP'
    
      38          'SKIP')
    
      39
    
      40# Specify desired features and device support here. A list can be
    
      41# obtained by running ./configure in the source directory.
    
      42_features=(
    
      43    aice
    
      44    amtjtagaccel
    
      45    armjtagew
    
      46    at91rm9200
    
      47    bcm2835gpio
    
      48    buspirate
    
      49    capstone
    
      50    cmsis-dap
    
      51    dummy
    
      52    ep93xx
    
      53    ftdi
    
      54    gw16012
    
      55    ioutil
    
      56    jlink
    
      57    jtag_vpi
    
      58    legacy-ft2232_libftdi
    
      59    oocd_trace
    
      60    opendous
    
      61    openjtag_ftdi
    
      62    osbdm
    
      63    parport
    
      64    presto_libftdi
    
      65    remote-bitbang
    
      66    rlink
    
      67    stlink
    
      68    sysfsgpio
    
      69    ti-icdi
    
      70    ulink
    
      71    usb-blaster-2
    
      72    usb_blaster_libftdi
    
      73    usbprog
    
      74    vsllink
    
      75    xlnx_pcie_xvc
    
      76    #parport-giveio
    
      77    #zy1000
    
      78    #zy1000-master
    
      79    )
    
      80
    
      81pkgver() {
    
      82  cd "${srcdir}/${pkgname}"
    
      83  git describe --tags --long | sed -E 's/^v//;s/([^-]*-g)/r\1/;s/-/./g'
    
      84}
    
      85
    
      86prepare() {
    
      87  cd "$srcdir/${pkgname}"
    
      88  sed -i 's|GROUP="plugdev", ||g' contrib/60-openocd.rules
    
      89  git submodule init
    
      90  git config submodule.jimtcl.url "$srcdir/jimtcl"
    
      91  git config submodule."src/jtag/drivers/libjaylink".url "$srcdir/libjaylink"
    
      92  git config submodule."tools/git2cl".url "$srcdir/git2cl"
    
      93  git -c protocol.file.allow=always submodule update
    
      94}
    
      95
    
      96build() {
    
      97  cd "$srcdir/${pkgname}"
    
      98
    
      99  ./bootstrap
    
      100  ./configure --prefix=/usr \
    
      101    --disable-werror \
    
      102    ${_features[@]/#/--enable-}
    
      103
    
      104  make
    
      105}
    
      106
    
      107package() {
    
      108  cd "$srcdir/${pkgname}"
    
      109
    
      110  make "DESTDIR=${pkgdir}" install
    
      111
    
      112  install -Dm 644 contrib/60-openocd.rules "$pkgdir"/usr/lib/udev/rules.d/60-openocd.rules
    
      113}
    
      114

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2