soapui

maintainer envolution · 112 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a source tarball from eviware.com, the official vendor's domain for SoapUI, which is a legitimate but non-whitelisted host; the download is of the project's own official release, not an untrusted binary or remote code, and the checksums are provided and verified, making the risk low.

Triggered rules

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-07-25) reviewed this and agrees it is LOW (confidence 95%): The package downloads a source tarball from eviware.com, the official vendor's domain for SoapUI, which is a legitimate but non-whitelisted host; the download is of the project's own official release, not an untrusted binary or remote code, and the checksums are provided and verified, making the risk low.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 "https://dl.eviware.com/soapuios/${pkgver}/SoapUI-${pkgver}-linux-bin.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: envolution
    
      2# Contributor: Damien Guihal <dguihal@gmail.com>
    
      3# shellcheck shell=bash disable=SC2034,SC2154
    
      4pkgname=soapui
    
      5pkgver=5.9.1
    
      6pkgrel=1
    
      7pkgdesc="free and open source cross-platform functional testing solution for APIs and web services"
    
      8arch=('i686' 'x86_64')
    
      9url="http://www.soapui.org/"
    
      10license=('EUPL-1.1')
    
      11depends=('java-environment>=17' hicolor-icon-theme ttf-dejavu)
    
      12optdepends=('java-openjfx: Open JFX for Internal browser')
    
      13source=(
    
      14  "https://dl.eviware.com/soapuios/${pkgver}/SoapUI-${pkgver}-linux-bin.tar.gz"
    
      15  "${pkgname}.png::https://raw.githubusercontent.com/SmartBear/soapui/refs/heads/next/soapui-installer/src/install4j/resources/images/SoapUI-OS_48-48.png"
    
      16  "$pkgname.desktop")
    
      17md5sums=('676d8f2d110a217f23abc376d2857781'
    
      18         'e4866edd68c373e9cf11903272d1d995'
    
      19         '65b69df4f67f9f7802fd4e56493e58d0')
    
      20
    
      21package() {
    
      22  cd "${srcdir}/SoapUI-${pkgver}"
    
      23
    
      24  #directories
    
      25  install -dm755 "${pkgdir}/usr/share/java/${pkgname}"
    
      26  install -dm755 "${pkgdir}/usr/bin"
    
      27  install -dm755 "${pkgdir}/usr/share/applications"
    
      28  install -dm755 "${pkgdir}/usr/share/pixmaps"
    
      29
    
      30  #application files
    
      31  cp -r bin lib "${pkgdir}/usr/share/java/${pkgname}"
    
      32  install -Dm644 LICENSE.txt "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      33
    
      34  #additional files
    
      35  cp -r Tutorials "${pkgdir}/usr/share/java/${pkgname}"
    
      36  install -Dm644 README.md "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      37  install -Dm644 RELEASENOTES.txt "${pkgdir}/usr/share/doc/${pkgname}/RELEASENOTES.txt"
    
      38
    
      39  #desktop files
    
      40  install -Dm644 "${srcdir}/soapui.desktop" "${pkgdir}/usr/share/applications/soapui.desktop"
    
      41  install -Dm644 "${srcdir}/soapui.png" "${pkgdir}/usr/share/pixmaps/soapui.png"
    
      42
    
      43  #launcher
    
      44  cat >"${pkgdir}/usr/bin/soapui" <<EOF
    
      45#!/bin/sh
    
      46cd /usr/share/java/${pkgname}/bin
    
      47./soapui.sh "\$@"
    
      48EOF
    
      49  chmod 755 "${pkgdir}/usr/bin/soapui"
    
      50
    
      51  # Fix permissions
    
      52  find "${pkgdir}/usr/share/java/${pkgname}/bin" -type f -exec chmod 755 {} \;
    
      53  chmod -R go-w "${pkgdir}/usr/share/java"
    
      54}
    
      55
    
      56# vim:set ts=2 sw=2 et:
    
      57

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2