google-cloud-cli-bundled-python3-unix 592.0.0-1
gcloud Bundled Python 3.12
config.json file.
/v1/packages/google-cloud-cli-bundled-python3-unix/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| ddd53e63de47head | verified | 2026-11-05 16:11 | 6 |
| 6d136283cb12 | verified | 2026-11-05 16:11 | 6 |
| 652efc31d2f8 | verified | 2026-11-05 16:03 | 6 |
| 94ab89553ed5 | verified | 2026-11-05 16:03 | 6 |
| 379dabd53c47 | verified | 2026-11-05 16:03 | 6 |
Head findings
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
cat <<<"$(jq '.disable_updater = false' <lib/googlecloudsdk/core/config.json)" >lib/googlecloudsdk/core/config.json
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
cat <<<"$(jq '.disable_updater = true' <lib/googlecloudsdk/core/config.json)" >lib/googlecloudsdk/core/config.json
command-substitution
in
google-cloud-cli.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
ALL_OFF="$(tput sgr0)"
command-substitution
in
google-cloud-cli.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
BOLD="$(tput bold)"
command-substitution
in
google-cloud-cli.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
BLUE="${BOLD}$(tput setaf 4)"command-substitution
in
google-cloud-cli.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
YELLOW="${BOLD}$(tput setaf 3)"Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.