saleae-logic2
The package downloads a prebuilt AppImage from Saleae's official downloads domain, which is plausibly the project's own release infrastructure; despite the non-whitelisted host, the AppImage is from the official vendor and the worst case of a swapped source would be a compromised official binary, which is a low-severity supply-chain risk for this type of software.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt AppImage from Saleae's official downloads domain, which is plausibly the project's own release infrastructure; despite the non-whitelisted host, the AppImage is from the official vendor and the worst case of a swapped source would be a compromised official binary, which is a low-severity supply-chain risk for this type of software.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source=("https://downloads2.saleae.com/logic2/Logic-${pkgver}-linux-x64.AppImage")
PKGBUILD
1 offending line(s) highlighted# Maintainer: tugyan <bilaltasdelen at windowslive dot com>
# Contributor: jkdhn <aur@jkdhn.me>
pkgname=saleae-logic2
pkgver=2.4.48
pkgrel=1
pkgdesc="Debug hardware like a pro"
arch=("x86_64")
url="https://discuss.saleae.com/c/logic-2-0-software/7"
license=("unknown")
depends=(
"libxcrypt-compat"
)
source=("https://downloads2.saleae.com/logic2/Logic-${pkgver}-linux-x64.AppImage")
conflicts=("saleae-logic" "saleae-logic-beta")
provides=("saleae-logic" "saleae-logic-beta")
sha256sums=('dbc2ded63b48d7561d9e2e5c9f1e2bafdc7f5654ee714ad123c69df74863641b')
build() {
_file="Logic-${pkgver}-linux-x64.AppImage"
chmod u+x "${_file}"
"./${_file}" --appimage-extract
_desktop="${srcdir}/squashfs-root/Logic.desktop"
sed -i "/^Exec=/cExec=${pkgname}" "${_desktop}"
sed -i "/^X-AppImage/d" "${_desktop}"
sed -i "s/^X-AppImage-Version=/Version=/" "${_desktop}"
}
package() {
mkdir "${pkgdir}/opt/"
mv "${srcdir}/squashfs-root/usr" "${pkgdir}/usr"
mv "${srcdir}/squashfs-root" "${pkgdir}/opt/${pkgname}"
mkdir -p "${pkgdir}/usr/share/applications"
mv "${pkgdir}/opt/${pkgname}/Logic.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"
rm "${pkgdir}/opt/${pkgname}/AppRun"
# Use intended program icon
mkdir -p "${pkgdir}/usr/share/icons/hicolor/512x512/apps"
mv "${pkgdir}/usr/lib/logic/resources/linux-x64/LogicIcon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/Logic.png"
install -Dm644 "${pkgdir}/usr/lib/logic/resources/udev/99-SaleaeLogic.rules" "${pkgdir}/etc/udev/rules.d/99-SaleaeLogic.rules"
rm "${pkgdir}/usr/bin/Logic" # remove the symlink
# Fix permissions (example: 700->755, 640->644)
find "${pkgdir}" -perm "/111" -exec chmod 755 \{\} \;
find "${pkgdir}" ! -perm "/111" -exec chmod 644 \{\} \;
chmod 4755 "${pkgdir}/usr/lib/logic/chrome-sandbox"
mkdir -p "${pkgdir}/usr/bin/"
ln -s "/usr/lib/logic/Logic" "${pkgdir}/usr/bin/${pkgname}"
}
Changes since previous scan
--- PKGBUILD @ 2026-08-12 00:27+++ PKGBUILD @ 2026-10-17 00:21@@ -2,7 +2,7 @@ # Contributor: jkdhn <aur@jkdhn.me> pkgname=saleae-logic2-pkgver=2.4.46+pkgver=2.4.48 pkgrel=1 pkgdesc="Debug hardware like a pro" arch=("x86_64")@@ -14,7 +14,7 @@ source=("https://downloads2.saleae.com/logic2/Logic-${pkgver}-linux-x64.AppImage") conflicts=("saleae-logic" "saleae-logic-beta") provides=("saleae-logic" "saleae-logic-beta")-sha256sums=('82832ed0d3166701d7f4f7df57a620b721a23883e0cfe8f2e8e95a2e6720d6f2')+sha256sums=('dbc2ded63b48d7561d9e2e5c9f1e2bafdc7f5654ee714ad123c69df74863641b') build() { _file="Logic-${pkgver}-linux-x64.AppImage"@@ -34,25 +34,23 @@ mkdir -p "${pkgdir}/usr/share/applications" mv "${pkgdir}/opt/${pkgname}/Logic.desktop" "${pkgdir}/usr/share/applications/${pkgname}.desktop"- rm "${pkgdir}/opt/${pkgname}/Logic.png"- rm "${pkgdir}/opt/${pkgname}/.DirIcon" rm "${pkgdir}/opt/${pkgname}/AppRun"- rm "${pkgdir}/opt/${pkgname}/version"- rm -rf "${pkgdir}/usr/lib/" # Use intended program icon- rm -r "${pkgdir}/usr/share/icons" mkdir -p "${pkgdir}/usr/share/icons/hicolor/512x512/apps"- mv "${pkgdir}/opt/${pkgname}/resources/linux-x64/LogicIcon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/Logic.png"+ mv "${pkgdir}/usr/lib/logic/resources/linux-x64/LogicIcon.png" "${pkgdir}/usr/share/icons/hicolor/512x512/apps/Logic.png" - install -Dm644 "${pkgdir}/opt/${pkgname}/resources/linux-x64/99-SaleaeLogic.rules" "${pkgdir}/etc/udev/rules.d/99-SaleaeLogic.rules"+ install -Dm644 "${pkgdir}/usr/lib/logic/resources/udev/99-SaleaeLogic.rules" "${pkgdir}/etc/udev/rules.d/99-SaleaeLogic.rules" - # Fix permissions (example: 700->755, 640->644)+ rm "${pkgdir}/usr/bin/Logic" # remove the symlink++ # Fix permissions (example: 700->755, 640->644) find "${pkgdir}" -perm "/111" -exec chmod 755 \{\} \; find "${pkgdir}" ! -perm "/111" -exec chmod 644 \{\} \;- chmod 4755 "${pkgdir}/opt/${pkgname}/chrome-sandbox"+ chmod 4755 "${pkgdir}/usr/lib/logic/chrome-sandbox" mkdir -p "${pkgdir}/usr/bin/"- ln -s "/opt/${pkgname}/Logic" "${pkgdir}/usr/bin/${pkgname}"+ ln -s "/usr/lib/logic/Logic" "${pkgdir}/usr/bin/${pkgname}"+ } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 23:13:54 | Medium | 1 |
| 2026-08-12 00:27:08 | Clean | 2 |
| 2026-08-11 17:21:34 | Medium | 1 |
| 2026-08-11 15:21:23 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |