rocm-gfx908-bin
LOW
maintainer HurricanePootis
0 votes
scanned 2026-10-06 00:19:23.678998
Why flagged
Downloads a large prebuilt ROCm tarball from stable.repo.amd.com, which is AMD's own official ROCm repository infrastructure, so this is effectively an official vendor binary distribution; the non-standard host flag is a false positive since it is AMD's own domain.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): Downloads a large prebuilt ROCm tarball from stable.repo.amd.com, which is AMD's own official ROCm repository infrastructure, so this is effectively an official vendor binary distribution; the non-standard host flag is a false positive since it is AMD's own domain.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
"https://stable.repo.amd.com/rocm/core/tarball/therock-dist-linux-gfx908-10.0.0.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: HurricanePootis <hurricanepootis@protonmail.com>
2
# Contributor: George Sofianos <george at sofianos dot dev>
3
4
# Release notes https://rocm.docs.amd.com/en/latest/about/release-notes.html
5
pkgname=rocm-gfx908-bin
6
pkgdesc="ROCm Core SDK - CDNA1"
7
pkgver=10.0.0
8
pkgrel=2
9
epoch=0
10
arch=('x86_64')
11
url='http://www.amd.com'
12
license=('custom:AMD')
13
depends=('ocl-icd' 'gcc-libs')
14
provides=('opencl-driver' 'amdrocm-amdsmi' 'amdrocm-llvm' 'amdrocm-runtime' 'amdrocm-fft' 'amdrocm-blas' 'amdrocm-sparse' 'amdrocm-solver' 'amdrocm-dnn' 'amdrocm-rand' 'amdrocm-ccl' 'amdrocm-profiler' 'amdrocm-profiler-base' 'amdrocm-base' 'amdrocm-ck'
15
'amdrocm-debugger' 'amdrocm-hipify' 'amdrocm-opencl' 'amdrocm-decode' 'amdrocm-jpeg' 'amdrocm-rccl' 'amdrocm-rocshmem' 'amdrocm-rdc' 'amdrocm-sysdeps' 'rocm' 'rocm-core' 'comgr' 'rocm-hip' 'hip' 'hsa-rocr' 'rocminfo' 'hip-runtime-amd' 'rocm-device-libs' 'rocm-language-runtime' 'rocm-hip-runtime' 'rocm-ocl-icd' 'rocm-opencl-icd-loader' 'rocm-dbgapi' 'rocm-debug-agent' 'rocm-gdb' 'rocprofiler' 'rocprofiler-plugins' 'rocprofiler-register'
16
'roctracer' 'hsa-amd-aqlprofile' 'rocm-openmp' 'openmp-extras-runtime' 'rocm-cmake' 'rocm-smi-lib' 'amdsmi' 'amd-smi-lib' 'composable-kernel' 'hipcc' 'rocm-llvm' 'rocblas' 'rocsolver' 'half' 'hipblas' 'hipblas-common' 'hipblaslt' 'hiprand' 'rocdecode' 'rocjpeg' 'rocprim' 'hipcub'
17
'rocfft' 'hipfft' 'hipify-clang' 'hipsolver' 'rocsparse' 'hipsparse' 'hipsparselt' 'hiptensor' 'openmp-extras-dev' 'rccl' 'rocalution' 'rocrand' 'rocm-hip-libraries' 'rocthrust' 'rocprofiler-compute' 'rocprofiler-debug' 'rocprofiler-systems' 'rocm-hip-sdk' 'rocm-opencl'
18
'rocm-opencl-runtime' 'rocm-opencl-sdk' 'rocwmma' 'rocprofiler-sdk' 'rocprofiler-sdk-roctx' 'rocprofiler-sdk-rocpd' 'rocm-developer-tools' 'rocshmem' 'miopen' 'miopen-hip' 'rocm-ml-libraries' 'rocm-ml-sdk')
19
conflicts=('opencl-amd' 'opencl-amd-dev' 'rocm-bin' 'rocm-gfx103x-bin' 'rocm-gfx110x-bin' 'rocm-gfx120x-bin' 'rocm-gfx1150-bin' 'rocm-gfx1151-bin' 'rocm-gfx1152-bin' 'rocm-gfx1153-bin' 'rocm-opencl-runtime' 'rocm' 'rocm-core' 'comgr' 'rocm-hip' 'hip' 'hsa-rocr' 'rocminfo' 'hip-runtime-amd' 'rocm-device-libs' 'rocm-language-runtime' 'rocm-hip-runtime' 'rocm-ocl-icd' 'rocm-opencl-icd-loader' 'rocm-dbgapi' 'rocm-debug-agent' 'rocm-gdb'
20
'rocprofiler' 'rocprofiler-plugins' 'rocprofiler-register' 'roctracer' 'hsa-amd-aqlprofile' 'rocm-openmp' 'openmp-extras-runtime' 'rocm-cmake' 'rocm-smi-lib' 'amdsmi' 'amd-smi-lib' 'composable-kernel' 'hipcc' 'rocm-llvm' 'rocblas' 'rocsolver' 'hipblas' 'hipblas-common' 'hipblaslt' 'hiprand' 'rocdecode' 'rocjpeg' 'rocprim' 'hipcub' 'rocfft' 'hipfft' 'hipify-clang' 'hipsolver' 'rocsparse' 'hipsparse' 'hipsparselt' 'hiptensor' 'rccl' 'rocalution' 'rocrand' 'rocm-hip-libraries' 'rocthrust' 'rocprofiler-compute' 'rocprofiler-debug' 'rocprofiler-systems' 'rocm-hip-sdk' 'rocm-opencl' 'rocm-opencl-runtime' 'rocm-opencl-sdk' 'rocwmma' 'rocprofiler-sdk' 'rocprofiler-sdk-roctx' 'rocprofiler-sdk-rocpd' 'rocm-developer-tools' 'rocshmem' 'miopen' 'miopen-hip'
21
'rocm-ml-libraries' 'rocm-ml-sdk')
22
optdepends=('clinfo')
23
options=('!strip')
24
25
source=(
26
"https://stable.repo.amd.com/rocm/core/tarball/therock-dist-linux-gfx908-10.0.0.tar.gz"
27
)
28
29
noextract=(therock-dist-linux-gfx908-10.0.0.tar.gz)
30
31
sha256sums=('d66ea48f449cdf9fa3e5d89a608998e465aeef01531be94be5f2cbd80c4712d3')
32
33
prepare() {
34
mkdir -p "${srcdir}/opt/rocm/core"
35
bsdtar xf therock-dist-linux-gfx908-10.0.0.tar.gz -C ${srcdir}/opt/rocm/core
36
}
37
38
package() {
39
mv "${srcdir}/opt/" "${pkgdir}/"
40
41
mkdir -p "${pkgdir}/opt/amdgpu/share/libdrm"
42
cd "${pkgdir}/opt/amdgpu/share/libdrm"
43
ln -s /usr/share/libdrm/amdgpu.ids amdgpu.ids
44
45
mkdir -p "${pkgdir}/etc/OpenCL/vendors"
46
echo /opt/rocm/core/lib/opencl/libamdocl64.so > "${pkgdir}/etc/OpenCL/vendors/amdocl64.icd"
47
48
mkdir -p "${pkgdir}/etc/ld.so.conf.d"
49
echo /opt/rocm/core/lib >> "$pkgdir/etc/ld.so.conf.d/rocm-bin.conf"
50
51
mkdir -p "${pkgdir}/opt/rocm"
52
cd "${pkgdir}/opt/rocm"
53
ln -s /opt/rocm/core/lib lib
54
ln -s /opt/rocm/core/include include
55
ln -s /opt/rocm/core/bin bin
56
57
58
mkdir -p "${pkgdir}/etc/profile.d"
59
echo export PATH="\${PATH}:/opt/rocm/core/bin:/opt/rocm/core/lib/llvm/bin" > "$pkgdir/etc/profile.d/rocm-bin.sh"
60
}
61
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-06 00:19:23 | Low | 3 |
| 2026-10-06 00:13:36 | Low | 3 |
| 2026-10-05 23:40:58 | Medium | 2 |