visual-studio-code-insiders-bin
MEDIUM
maintainer dcelasun
42 votes
scanned 2026-09-17 09:25:44.114158
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
source_x86_64=(code_x64_1789536163.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/c74ba73b780a4a33173c006e52560d61432f53d6/code-insiders_1.139.0-1789536163_amd64.deb)
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: D. Can Celasun <can[at]dcc[dot]im>
2
3
pkgname=visual-studio-code-insiders-bin
4
_pkgname=visual-studio-code-insiders
5
pkgver=1789536163
6
pkgrel=1
7
pkgdesc="Visual Studio Code Insiders (vscode): Editor for building and debugging modern web and cloud applications (official binary version)"
8
arch=('x86_64' 'aarch64' 'armv7h')
9
url="https://code.visualstudio.com/"
10
license=('custom: commercial')
11
provides=('code-insiders' 'vscode-insiders')
12
conflicts=('code-insiders')
13
# Upstream has signature verification for extensions and stripping breaks it
14
# See https://github.com/microsoft/vscode/issues/223455#issuecomment-2610001754
15
options=(!strip)
16
install=$pkgname.install
17
# lsof: needed for terminal splitting, see https://github.com/Microsoft/vscode/issues/62991
18
# xdg-utils: needed for opening web links with xdg-open
19
depends=(libxkbfile gnupg gtk3 libsecret nss gcc-libs libnotify libxss glibc lsof shared-mime-info xdg-utils alsa-lib)
20
optdepends=('glib2: Needed for move to trash functionality'
21
'libdbusmenu-glib: Needed for KDE global menu'
22
'org.freedesktop.secrets: Needed for settings sync'
23
# See https://github.com/MicrosoftDocs/live-share/issues/4650
24
'icu69: Needed for live share' )
25
source=(${_pkgname}-bin.sh)
26
source_x86_64=(code_x64_1789536163.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/c74ba73b780a4a33173c006e52560d61432f53d6/code-insiders_1.139.0-1789536163_amd64.deb)
27
source_aarch64=(code_arm64_1789536156.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/c74ba73b780a4a33173c006e52560d61432f53d6/code-insiders_1.139.0-1789536156_arm64.deb)
28
source_armv7h=(code_armhf_1789536028.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/c74ba73b780a4a33173c006e52560d61432f53d6/code-insiders_1.139.0-1789536028_armhf.deb)
29
sha256sums=('bf8abef6671392bf1f11d203fd940cc44e764e9c6352be7799880535c2f15087')
30
sha256sums_x86_64=('c9a93ba02c857240bb22bca92da44a4b7c8a7528002a36d960ff521f7ccb8309')
31
sha256sums_aarch64=('9804fe8192d3a5367fecf93f6e2e3d564d9d403407fade8dae34461c3f0fca35')
32
sha256sums_armv7h=('23b2ce1b78bc54b95b5043e31c68b7d3ff84f6a1cb4a8b42436df93ff1b831fd')
33
34
package() {
35
bsdtar -xf data.tar.xz -C "${pkgdir}/"
36
37
install -d "${pkgdir}/usr/bin"
38
install -d "${pkgdir}/usr/share/licenses/${pkgname}"
39
40
ln -s /usr/share/code-insiders/resources/app/LICENSE.rtf \
41
"${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.rtf"
42
43
# Launcher
44
install -m755 "${srcdir}/${_pkgname}-bin.sh" "${pkgdir}/usr/bin/code-insiders"
45
46
# Fix the desktop entries
47
sed -i \
48
-e 's/^\(Exec=\)[^ ]*/\1code-insiders/g' \
49
"${pkgdir}"/usr/share/applications/*.desktop
50
51
# setuid on chrome-sandbox
52
# Comment out if using a kernel without user namespaces, like linux-hardened
53
chmod u-s "${pkgdir}/usr/share/code-insiders/chrome-sandbox"
54
}
55
Changes since previous scan
--- PKGBUILD @ 2026-09-17 00:27+++ PKGBUILD @ 2026-09-17 09:25@@ -2,7 +2,7 @@ pkgname=visual-studio-code-insiders-bin _pkgname=visual-studio-code-insiders-pkgver=1789579030+pkgver=1789536163 pkgrel=1 pkgdesc="Visual Studio Code Insiders (vscode): Editor for building and debugging modern web and cloud applications (official binary version)" arch=('x86_64' 'aarch64' 'armv7h')@@ -23,13 +23,13 @@ # See https://github.com/MicrosoftDocs/live-share/issues/4650 'icu69: Needed for live share' ) source=(${_pkgname}-bin.sh)-source_x86_64=(code_x64_1789579030.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/4dbe1643e6189ba7b1bbe542cc0e56a94d9ff132/code-insiders_1.139.0-1789579030_amd64.deb)-source_aarch64=(code_arm64_1789578973.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/4dbe1643e6189ba7b1bbe542cc0e56a94d9ff132/code-insiders_1.139.0-1789578973_arm64.deb)-source_armv7h=(code_armhf_1789578827.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/4dbe1643e6189ba7b1bbe542cc0e56a94d9ff132/code-insiders_1.139.0-1789578827_armhf.deb)+source_x86_64=(code_x64_1789536163.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/c74ba73b780a4a33173c006e52560d61432f53d6/code-insiders_1.139.0-1789536163_amd64.deb)+source_aarch64=(code_arm64_1789536156.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/c74ba73b780a4a33173c006e52560d61432f53d6/code-insiders_1.139.0-1789536156_arm64.deb)+source_armv7h=(code_armhf_1789536028.deb::https://vscode.download.prss.microsoft.com/dbazure/download/insider/c74ba73b780a4a33173c006e52560d61432f53d6/code-insiders_1.139.0-1789536028_armhf.deb) sha256sums=('bf8abef6671392bf1f11d203fd940cc44e764e9c6352be7799880535c2f15087')-sha256sums_x86_64=('4bf0958a1e902e963e45d9874800484d822b56b6250426da1aedfad1bb289510')-sha256sums_aarch64=('2c4f1bf571ffd2154e914cc77096348f2cc07936cd50c543c8d1453b0c5d41fb')-sha256sums_armv7h=('2c0af73ce93d8a60000585d3f488fa6ae320099c66432de2152d0d413c9b0db0')+sha256sums_x86_64=('c9a93ba02c857240bb22bca92da44a4b7c8a7528002a36d960ff521f7ccb8309')+sha256sums_aarch64=('9804fe8192d3a5367fecf93f6e2e3d564d9d403407fade8dae34461c3f0fca35')+sha256sums_armv7h=('23b2ce1b78bc54b95b5043e31c68b7d3ff84f6a1cb4a8b42436df93ff1b831fd') package() { bsdtar -xf data.tar.xz -C "${pkgdir}/"Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 09:25:44 | Medium | 1 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 23:24:19 | Medium | 1 |
| 2026-09-16 21:23:45 | Medium | 1 |
| 2026-09-16 13:22:46 | Medium | 1 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 23:20:44 | Medium | 1 |
| 2026-09-15 11:19:45 | Medium | 1 |
| 2026-09-15 05:18:46 | Medium | 1 |
| 2026-09-15 01:18:20 | Medium | 1 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 01:15:25 | Medium | 1 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 15:22:58 | Medium | 1 |
| 2026-09-11 11:22:29 | Medium | 1 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 15:20:39 | Medium | 1 |
| 2026-09-10 00:22:44 | Low | 2 |