openocd-n32-git

maintainer Adlyq · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from source using git repositories hosted on trusted platforms (GitHub, GitLab, Savannah), even though checksums are skipped; the non-standard host refers to a personal GitHub fork used for a custom build, which is common and low-risk for AUR packages.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from source using git repositories hosted on trusted platforms (GitHub, GitLab, Savannah), even though checksums are skipped; the non-standard host refers to a personal GitHub fork used for a custom build, which is common and low-risk for AUR packages.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:30 "git+https://gitlab.zapb.de/libjaylink/libjaylink.git"

PKGBUILD

1 offending line(s) highlighted

      1# ex: ts=2 sts=2 sw=2 et
    
      2# Maintainer: adlyq
    
      3# Contributor: yhfudev <yhfudev ta gmail dot com> (Original openocd-git Maintainer)
    
      4# Contributor: veox <veox ta wemakethings dot net>
    
      5# Contributor: Nick Østergaard <oe.nick at gmail dot com>
    
      6# Contributor: Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
    
      7# Contributor: Matthias Bauch <matthias.bauch@gmail.com>
    
      8# Contributor: Laszlo Papp <djszapi2 at gmail com>
    
      9# Contributor: Samuel Tardieu <sam@rfc1149.net>
    
      10#
    
      11# Note: This PKGBUILD is copied and modified from the openocd-git package on AUR.
    
      12
    
      13_pkgbase=openocd
    
      14pkgname=openocd-n32-git
    
      15pkgver=r11455.33463e015
    
      16pkgrel=1
    
      17pkgdesc="Debugging, in-system programming and boundary-scan testing for embedded target devices (custom git version for N32)"
    
      18arch=('i686' 'x86_64' 'arm' 'aarch64')
    
      19url="https://github.com/Adlyq/openocd"
    
      20license=('GPL')
    
      21depends=('libftdi-compat' 'libusb-compat' 'hidapi' 'libudev.so' 'capstone' 'libjaylink')
    
      22makedepends=('git' 'automake>=1.11' 'autoconf' 'libtool' 'tcl')
    
      23options=(!strip)
    
      24provides=('openocd')
    
      25conflicts=('openocd')
    
      26
    
      27source=(
    
      28	"${pkgname}::git+https://github.com/Adlyq/openocd.git"
    
      29	"git+https://github.com/msteveb/jimtcl.git"
    
      30	"git+https://gitlab.zapb.de/libjaylink/libjaylink.git"
    
      31	"git+https://git.savannah.nongnu.org/git/git2cl.git"
    
      32
    
      33)
    
      34md5sums=('SKIP'
    
      35	'SKIP'
    
      36	'SKIP'
    
      37	'SKIP')
    
      38sha1sums=('SKIP'
    
      39	'SKIP'
    
      40	'SKIP'
    
      41	'SKIP')
    
      42
    
      43# Specify desired features and device support here. A list can be
    
      44# obtained by running ./configure in the source directory.
    
      45_features=(
    
      46	aice
    
      47	amtjtagaccel
    
      48	armjtagew
    
      49	at91rm9200
    
      50	bcm2835gpio
    
      51	buspirate
    
      52	capstone
    
      53	cmsis-dap
    
      54	dummy
    
      55	ep93xx
    
      56	ftdi
    
      57	gw16012
    
      58	ioutil
    
      59	jlink
    
      60	jtag_vpi
    
      61	legacy-ft2232_libftdi
    
      62	oocd_trace
    
      63	opendous
    
      64	openjtag_ftdi
    
      65	osbdm
    
      66	parport
    
      67	presto_libftdi
    
      68	remote-bitbang
    
      69	rlink
    
      70	stlink
    
      71	sysfsgpio
    
      72	ti-icdi
    
      73	ulink
    
      74	usb-blaster-2
    
      75	usb_blaster_libftdi
    
      76	usbprog
    
      77	vsllink
    
      78	xlnx_pcie_xvc
    
      79	#parport-giveio
    
      80	#zy1000
    
      81	#zy1000-master
    
      82)
    
      83
    
      84pkgver() {
    
      85	cd "${srcdir}/${pkgname}"
    
      86	printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      87}
    
      88
    
      89prepare() {
    
      90	cd "$srcdir/${pkgname}"
    
      91	sed -i 's|GROUP="plugdev", ||g' contrib/60-openocd.rules
    
      92	git submodule init
    
      93	git config submodule.jimtcl.url "$srcdir/jimtcl"
    
      94	git config submodule."src/jtag/drivers/libjaylink".url "$srcdir/libjaylink"
    
      95	git config submodule."tools/git2cl".url "$srcdir/git2cl"
    
      96	git -c protocol.file.allow=always submodule update
    
      97}
    
      98
    
      99build() {
    
      100	cd "$srcdir/${pkgname}"
    
      101
    
      102	./bootstrap
    
      103	./configure --prefix=/usr \
    
      104		--disable-werror \
    
      105		${_features[@]/#/--enable-}
    
      106
    
      107	make
    
      108}
    
      109
    
      110package() {
    
      111	cd "$srcdir/${pkgname}"
    
      112
    
      113	make "DESTDIR=${pkgdir}" install
    
      114
    
      115	install -Dm 644 contrib/60-openocd.rules "$pkgdir"/usr/lib/udev/rules.d/60-openocd.rules
    
      116}
    
      117

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2