zulu-11-bin
LOW
maintainer yigitsalar
8 votes
scanned 2026-10-07 00:21:34.957174
Why flagged
The package downloads prebuilt Zulu JDK binaries from Azul's official CDN (cdn.azul.com), which is the legitimate source for this software; despite the static analyzer flag for a non-whitelisted host, this is a standard and trusted distribution point, and the downloads are verified via sha256sums.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt Zulu JDK binaries from Azul's official CDN (cdn.azul.com), which is the legitimate source for this software; despite the static analyzer flag for a non-whitelisted host, this is a standard and trusted distribution point, and the downloads are verified via sha256sums.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:30
source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Yiğit Salar <yigit dot salar7 at gmail dot com>
2
# Contributor: Hendrik Schick <hendrik at hndrkk dot me>
3
# Contributor: Sam Guymer <sam at guymer dot me>
4
5
_jdkname=zulu-11
6
pkgname="${_jdkname}-bin"
7
_java_ver=11
8
_zulu_build=11.90.205
9
pkgver=11.0.32.1
10
pkgrel=1
11
pkgdesc='Zulu Community builds of OpenJDK are fully certified and 100% open source Java Development Kits (JDKs) for all Java development and production workloads.'
12
arch=('aarch64' 'x86_64')
13
url='https://azul.com/products/zulu-community'
14
license=('custom')
15
options=('!strip' '!debug')
16
depends=(
17
'java-environment-common>=3'
18
'java-runtime-common>=3'
19
'ca-certificates-utils'
20
)
21
provides=(
22
"java-environment=$_java_ver"
23
"java-environment-openjdk=$_java_ver"
24
"java-runtime-headless=$_java_ver"
25
"java-runtime-headless-openjdk=$_java_ver"
26
"java-runtime=$_java_ver"
27
"java-runtime-openjdk=$_java_ver"
28
)
29
install="$pkgname.install"
30
source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64.tar.gz")
31
source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-ca-jdk${pkgver}-linux_x64.tar.gz")
32
sha256sums_aarch64=('4960147b38139ee6bd0c9d3f6c06f1fde71b6603a69618ae8b57a9d66e5dc4a9')
33
sha256sums_x86_64=('cb9ca98d2bf067b4cdbd616c21dba1f2c77174ea716d1378fb7fdcb6927223d5')
34
35
_jvmdir="/usr/lib/jvm/${_jdkname}"
36
37
package() {
38
if [ "${CARCH}" = "aarch64" ]; then
39
cd "$srcdir/zulu${_zulu_build}-ca-jdk${pkgver}-linux_aarch64"
40
else
41
cd "$srcdir/zulu${_zulu_build}-ca-jdk${pkgver}-linux_x64"
42
fi
43
44
install -dm 755 "${pkgdir}/${_jvmdir}"
45
cp -a . "${pkgdir}/${_jvmdir}/"
46
47
# copied from java11-openjdk
48
49
# Conf
50
install -dm 755 "${pkgdir}/etc"
51
cp -r conf "${pkgdir}/etc/${_jdkname}"
52
rm -rf "${pkgdir}/${_jvmdir}/conf"
53
ln -s "/etc/${_jdkname}" "${pkgdir}/${_jvmdir}/conf"
54
55
# Legal
56
install -dm 755 "${pkgdir}/usr/share/licenses"
57
cp -r legal "${pkgdir}/usr/share/licenses/${_jdkname}"
58
rm -rf "${pkgdir}/${_jvmdir}/legal"
59
ln -s "/usr/share/licenses/${_jdkname}" "${pkgdir}/${_jvmdir}/legal"
60
61
# Man pages
62
for f in man/man1/* man/ja/man1/*; do
63
install -Dm 644 "${f}" "${pkgdir}/usr/share/${f/\.1/-zulu-11.1}"
64
done
65
rm -rf "${pkgdir}/${_jvmdir}/man"
66
ln -s /usr/share/man "${pkgdir}/${_jvmdir}/man"
67
68
# Link JKS keystore from ca-certificates-utils
69
rm -f "${pkgdir}/${_jvmdir}/lib/security/cacerts"
70
ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}/${_jvmdir}/lib/security/cacerts"
71
}
72
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-07 00:21:34 | Low | 2 |
| 2026-10-06 00:13:36 | Low | 2 |
| 2026-10-05 00:08:03 | Low | 2 |
| 2026-10-04 00:18:08 | Low | 2 |
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |