zsh-git
LOW
maintainer a821
16 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a Git repository from SourceForge, a known and generally trusted hosting platform; building from a non-whitelisted but legitimate project host with a SKIP'd checksum is a mild risk, but the source is the official zsh codebase and no untrusted executables are involved.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Git repository from SourceForge, a known and generally trusted hosting platform; building from a non-whitelisted but legitimate project host with a SKIP'd checksum is a mild risk, but the source is the official zsh codebase and no untrusted executables are involved.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=('zsh::git://git.code.sf.net/p/zsh/code'
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Christian Hesse <mail@eworm.de>
2
# Contributor: Pierre Schmitz <pierre@archlinux.de>
3
4
pkgbase=zsh-git
5
pkgname=('zsh-git' 'zsh-doc-git')
6
pkgver=5.9.0.3.rtest.436.g0cd1b3881
7
pkgrel=1
8
arch=('x86_64')
9
url='https://www.zsh.org/'
10
license=('custom')
11
makedepends=('gdbm' 'git' 'libcap' 'pcre2' 'texlive-plaingeneric' 'yodl')
12
source=('zsh::git://git.code.sf.net/p/zsh/code'
13
'zprofile')
14
sha256sums=('SKIP'
15
'230832038c3b8f67fdb1b284ac5f68d709cdb7f1bc752b0e60657b9b9d091045')
16
17
pkgver() {
18
cd zsh
19
git describe --tags | sed 's/zsh-//;s/-/.r/;s/-/./g'
20
}
21
22
prepare() {
23
cd zsh
24
25
# Set correct keymap path
26
sed -i 's#/usr/share/keymaps#/usr/share/kbd/keymaps#g' Completion/Linux/Command/_kbd
27
28
# Remove unneeded and conflicting completion scripts
29
for _fpath in AIX BSD Cygwin Darwin Debian Mandriva openSUSE Redhat Solaris; do
30
rm -rf Completion/$_fpath
31
sed 's#\s*Completion/'$_fpath'/\*/\*##g' -i Src/Zle/complete.mdd
32
done
33
34
rm Completion/Linux/Command/_pkgtool
35
36
# regenerate configure script
37
./Util/preconfig
38
}
39
40
build() {
41
cd zsh
42
43
./configure --prefix=/usr \
44
--docdir=/usr/share/doc/zsh \
45
--htmldir=/usr/share/doc/zsh/html \
46
--enable-etcdir=/etc/zsh \
47
--enable-zshenv=/etc/zsh/zshenv \
48
--enable-zlogin=/etc/zsh/zlogin \
49
--enable-zlogout=/etc/zsh/zlogout \
50
--enable-zprofile=/etc/zsh/zprofile \
51
--enable-zshrc=/etc/zsh/zshrc \
52
--enable-maildir-support \
53
--with-term-lib='ncursesw' \
54
--enable-multibyte \
55
--enable-function-subdirs \
56
--enable-fndir=/usr/share/zsh/functions \
57
--enable-scriptdir=/usr/share/zsh/scripts \
58
--with-tcsetpgrp \
59
--enable-pcre \
60
--enable-gdbm \
61
--enable-cap \
62
--enable-zsh-secure-free
63
make
64
65
make -C Doc zsh.pdf
66
}
67
68
check() {
69
cd zsh
70
HOME="${srcdir}" make check
71
}
72
73
package_zsh-git() {
74
pkgdesc='A very advanced and programmable command interpreter (shell) for UNIX'
75
depends=('pcre2' 'libcap' 'gdbm')
76
conflicts=('zsh')
77
provides=('zsh')
78
optdepends=(
79
"grml-zsh-config: grml's zsh setup"
80
'zsh-autosuggestions: Fish-like autosuggestions for zsh'
81
'zsh-completions: Additional completion definitions for Zsh'
82
'zsh-doc: Info, HTML and PDF format of the ZSH documentation'
83
'zsh-history-substring-search: ZSH port of Fish history search (up arrow)'
84
'zsh-lovers: A collection of tips, tricks and examples for the Z shell.'
85
'zsh-syntax-highlighting: Fish shell like syntax highlighting for Zsh'
86
'zshdb: A debugger for zsh scripts')
87
backup=('etc/zsh/zprofile')
88
install=zsh.install
89
90
cd zsh
91
make DESTDIR="${pkgdir}/" install
92
install -D -m644 "${srcdir}/zprofile" "${pkgdir}/etc/zsh/zprofile"
93
install -D -m644 LICENCE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
94
}
95
96
package_zsh-doc-git() {
97
pkgdesc='Info, HTML and PDF format of the ZSH documentation'
98
conflicts=('zsh-doc')
99
provides=('zsh-doc')
100
101
cd zsh
102
make DESTDIR="${pkgdir}/" install.info install.html
103
install -D -m644 Doc/zsh.pdf "${pkgdir}/usr/share/doc/zsh/zsh.pdf"
104
install -D -m644 LICENCE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
105
}
106
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |