stm32cubeide

maintainer kumen · 37 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a local source file that the user must manually download from the official ST website, which is a normal and safe AUR practice; the non-standard host flag is a false positive since the actual source is user-provided and not automatically fetched from an untrusted location.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a local source file that the user must manually download from the official ST website, which is a normal and safe AUR practice; the non-standard host flag is a false positive since the actual source is user-provided and not automatically fetched from an untrusted location.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:34 "${_pkg_license_name}::https://www.st.com/resource/en/license_agreement/dm00218346.pdf"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: kumen
    
      2# Contributor: nightuser <nightuser.android@gmail.com>
    
      3
    
      4pkgname="stm32cubeide"
    
      5pkgver=2.2.0
    
      6pkgrel=1
    
      7pkgdesc="Integrated Development Environment for STM32"
    
      8arch=("x86_64")
    
      9makedepends=('imagemagick')
    
      10depends=('glibc' 'libusb' 'ncurses5-compat-libs' 'webkit2gtk-4.1' 'stlink-server')
    
      11optdepends=('jlink-software-and-documentation' 'stlink' 'arm-none-eabi-gdb' 'stm32cubemx')
    
      12conflicts=()
    
      13url="https://www.st.com/en/development-tools/stm32cubeide.html"
    
      14license=('custom:SLA0048')
    
      15options=(!strip)
    
      16
    
      17_pkgver_ext=2.2.0_29186_20260626_0934
    
      18_pkg_file_name=stm32cubeide_2.2.0-Lin-x86_64.sh.zip
    
      19_pkg_license_name="${pkgname}_SLA0048.pdf"
    
      20_pkg_additional_terms="${pkgname}_v${pkgver}_additional_license_terms.html"
    
      21
    
      22if [ ! -f ${PWD}/${_pkg_file_name} ]; then
    
      23	echo ""
    
      24	echo "Package not found!"
    
      25	echo "The ${pkgname} can be downloaded here: ${url}"
    
      26	echo "Please remember to put a downloaded package ${_pkg_file_name} into the build directory (${PWD}) before build."
    
      27	echo ""
    
      28fi
    
      29
    
      30DLAGENTS=("https::/usr/bin/curl -gqb '' --retry 3 --retry-delay 3 -H "@${srcdir}http_headers" -o %o -L --compressed %u")
    
      31              
    
      32source=("local://${_pkg_file_name}"
    
      33	"99-jlink.rules.patch"
    
      34        "${_pkg_license_name}::https://www.st.com/resource/en/license_agreement/dm00218346.pdf"
    
      35        #"${_pkg_additional_terms}::https://www.st.com/resource/en/additional_license_terms/additional-license-terms-stm32cubeide-v2-1-0.html"
    
      36	"http_headers"
    
      37	"stm32cubeide.desktop"
    
      38	"stm32cubeide"
    
      39	"stm32cubeide_wayland"
    
      40	)
    
      41sha256sums=('6a3480814f718fd05dd43cd6c2f4ccb97556273029fab3a605b0dc34742911d0'
    
      42	'0f3f69f7c980a701bf814e94595f5acb51a5d91be76b74e5b632220cfb0e7bb3'
    
      43	'SKIP'
    
      44	#'SKIP'
    
      45	'4fc6f177425adbd491cbb7326969a4e77a78588c30e674a1e3455981ad523c40'
    
      46	'acd87925cc9e8003a45c03f26f4554e6c190da18c86300a77f7cce91664017a9'
    
      47	'59063401ec21ed8a88cfebbc71328331165108919758a2655454bb00dfdf174f'
    
      48	'accaaa9d5e9bdac89418fcb0bfdb7c9c76c4faa58ccb70b32137864808fa9984'
    
      49)
    
      50
    
      51prepare(){
    
      52	mkdir -p build
    
      53	sh "${srcdir}/"${pkgname}_${_pkgver_ext}-Lin-x86_64.sh --quiet --noexec --nox11 --target "${srcdir}/build"
    
      54
    
      55	mkdir -p "${srcdir}/build/stlink-server"
    
      56	sh "${srcdir}/build/"st-stlink-server.*.install.sh --quiet --noexec --nox11 --target "${srcdir}/build/stlink-server"
    
      57
    
      58	mkdir -p "${srcdir}/build/stlink-udev"
    
      59	sh "${srcdir}/build/"st-stlink-udev-rules-*-linux-noarch.sh --quiet --noexec --nox11 --target "${srcdir}/build/stlink-udev"
    
      60
    
      61	mkdir -p "${srcdir}/build/jlink-udev"
    
      62	sh "${srcdir}/build/"segger-jlink-udev-rules-*-linux-noarch.sh --quiet --noexec --nox11 --target "${srcdir}/build/jlink-udev"
    
      63}
    
      64
    
      65package() {
    
      66	cd "$srcdir"
    
      67
    
      68	echo "Installing ${pkgname}"
    
      69	install -dm 755 "${pkgdir}/opt/${pkgname}"
    
      70	tar zxf "./build/${pkgname}_${_pkgver_ext}-Lin.tar.gz" -C "${pkgdir}/opt/${pkgname}"
    
      71
    
      72	#echo 'Installing STlink server'
    
      73	#install -dm 755 "${pkgdir}/usr/bin/"
    
      74	#install -Dm 755 -o root -g root "${srcdir}/build/stlink-server/stlink-server" "${pkgdir}/usr/bin/"
    
      75
    
      76	#echo 'Installing STlink udev rules'
    
      77	#install -dm 755 "${pkgdir}/usr/lib/udev/rules.d/"
    
      78	#install -Dm 644 -o root -g root "$srcdir/build/stlink-udev/"*.rules "${pkgdir}/usr/lib/udev/rules.d/"
    
      79
    
      80	#echo 'Installing JLink udev rules'
    
      81	#install -dm 755 "${pkgdir}/usr/lib/udev/rules.d/"
    
      82	#install -Dm 644 -o root -g root "$srcdir/build/jlink-udev/"*.rules "${pkgdir}/usr/lib/udev/rules.d/" 
    
      83	#patch -i "${srcdir}/99-jlink.rules.patch" "${pkgdir}/usr/lib/udev/rules.d/99-jlink.rules"
    
      84
    
      85	echo 'Installing binary files'
    
      86	install -dm 755 "${pkgdir}/usr/bin/"
    
      87	install -Dm 755 "${srcdir}/${pkgname}" "${pkgdir}/usr/bin/${pkgname}"
    
      88	install -Dm 755 "${srcdir}/${pkgname}_wayland" "${pkgdir}/usr/bin/${pkgname}_wayland"
    
      89
    
      90	echo 'Installing desktop shortcut and icon'
    
      91	magick "${pkgdir}/opt/${pkgname}/icon.xpm" "${srcdir}/${pkgname}.png"
    
      92	install -dm 755 "${pkgdir}/usr/share/pixmaps/"
    
      93	install -dm 755 "${pkgdir}/usr/share/applications/"
    
      94	install -Dm 644 "${srcdir}/${pkgname}.png" 	"${pkgdir}/usr/share/pixmaps/${pkgname}.png"
    
      95	install -Dm 644 "${srcdir}/${pkgname}.desktop" 	"${pkgdir}/usr/share/applications/${pkgname}.desktop"
    
      96
    
      97	#echo 'Replace GDB by system'
    
      98	#rm "${pkgdir}/opt/stm32cubeide/plugins/"com.st.stm32cube.ide.mcu.externaltools.gnu-tools-for-stm32*/tools/bin/arm-none-eabi-gdb
    
      99	#rm "${pkgdir}/opt/stm32cubeide/plugins/"com.st.stm32cube.ide.mcu.externaltools.gnu-tools-for-stm32*/tools/bin/arm-none-eabi-gdb-add-index
    
      100	#ln -s /usr/bin/arm-none-eabi-gdb "${pkgdir}/opt/stm32cubeide/plugins/"com.st.stm32cube.ide.mcu.externaltools.gnu-tools-for-stm32*/tools/bin
    
      101	#ln -s /usr/bin/arm-none-eabi-gdb-add-index "${pkgdir}/opt/stm32cubeide/plugins/"com.st.stm32cube.ide.mcu.externaltools.gnu-tools-for-stm32*/tools/bin
    
      102	
    
      103	echo 'Create symlink from original directory name'
    
      104	read -r default_install_path < "${srcdir}/build/default_install_path.txt"
    
      105	install -dm 755  "${pkgdir}/opt/st/"
    
      106	ln -s "/opt/${pkgname}" "${pkgdir}${default_install_path}"
    
      107	
    
      108	echo 'Installing license files'
    
      109	install -dm 755 "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      110	install -Dm 644 -o root -g root "${srcdir}/${_pkg_license_name}" "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      111	#install -Dm 644 -o root -g root "${srcdir}/${_pkg_additional_terms}" "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      112}
    
      113
    
      114#
    
      115# makepkg --printsrcinfo > .SRCINFO
    
      116#
    
      117
    
      118# vim: set ts=8 sw=8 tw=0 noet:
    
      119

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2