github-copilot-sdk 1.0.22-preview.2

Done dynamic on Linux job 155299 crates.io SBOM Findings (VEX)

The build looked up github.com.

medium

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
10	network_lookup network · github-copilot-sdk	github.com	The build looked up github.com.
10	static:downloader_pattern static · github-copilot-sdk	build/download.rs:6	high severity downloader_pattern in build_script code: ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:380
10	static:network_access static · github-copilot-sdk	build/download.rs:6	medium severity network_access in build_script code (81 places): ureq::Error
10	static:process_spawn static · github-copilot-sdk	build/in_process/tests.rs:380	medium severity process_spawn in build_script code (21 places): std::process::Command
5	new_behavior diff · github-copilot-sdk	net:github.com	New since the previous version: net:github.com.

5 without points

Signal	Where	What
static:build_script static · github-copilot-sdk	build.rs	low severity build_script in build_script code: build.rs
static:secret_environment_variable static · github-copilot-sdk	tests/e2e/support.rs:674	medium severity secret_environment_variable in test code (4 places): GH_TOKEN
static:shell_command static · github-copilot-sdk	tests/e2e/mode_empty.rs:32	medium severity shell_command in test code (2 places): powershell
static:url_literal static · github-copilot-sdk	build/in_process.rs:494	low severity url_literal in build_script code (92 places): https://github.com/github/copilot-cli/releases/download/v{version}
static:windows_api static · github-copilot-sdk	src/generated/rpc.rs:16938	medium severity windows_api in library code: ShellExecuteUserRequestedRequest

Behavior

New since the previous version

net:github.com

Profile

net:github.com static:downloader_pattern static:network_access static:process_spawn static:secret_environment_variable static:shell_command static:windows_api

Static findings

high downloader_pattern build_script 1

ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:380 build/download.rs:6

medium network_access build_script 26

ureq::Error build/download.rs:6 build/download.rs:26
ureq::Error::StatusCode build/download.rs:8 build/download.rs:28
ureq::Error::BadUri build/download.rs:9
ureq::Error::Http build/download.rs:10
ureq::Error::InvalidProxyUrl build/download.rs:11
ureq::Error::TooManyRedirects build/download.rs:12
ureq::Error::RedirectFailed build/download.rs:13
ureq::Error::RequireHttpsOnly build/download.rs:14
ureq::Error::TlsRequired build/download.rs:15
ureq::Error::Tls build/download.rs:16
ureq::Error::NativeTls build/download.rs:17
ureq::Error::Pem build/download.rs:18
ureq::Error::Der build/download.rs:19
ureq::Error::BodyExceedsLimit build/download.rs:20
ureq::Error::LargeResponseHeader build/download.rs:21
ureq::http::StatusCode::from_u16 build/download.rs:29
ureq::Agent::config_builder build/in_process.rs:1015 build/out_of_process.rs:596
ureq::tls::TlsConfig::builder build/in_process.rs:1017 build/out_of_process.rs:598
ureq::tls::TlsProvider::NativeTls build/in_process.rs:1018 build/out_of_process.rs:599
ureq::tls::RootCerts::PlatformVerifier build/in_process.rs:1019 build/out_of_process.rs:600

medium secret_environment_variable test 4

GH_TOKEN tests/e2e/support.rs:674 tests/e2e/support.rs:1508
GITHUB_TOKEN tests/e2e/support.rs:675 tests/e2e/support.rs:1509

medium process_spawn build_script 2

std::process::Command build/in_process/tests.rs:380
std::process::Command::new build/in_process/tests.rs:381

medium shell_command test 2

powershell tests/e2e/mode_empty.rs:32 tests/e2e/mode_empty.rs:123

medium windows_api library 1

ShellExecuteUserRequestedRequest src/generated/rpc.rs:16938

low network_access test 48

ureq::Error::StatusCode tests/build_download.rs:8 tests/build_download.rs:18 tests/build_download.rs:30
ureq::Error::Io tests/build_download.rs:9
ureq::Error::HostNotFound tests/build_download.rs:12
ureq::Error::BodyStalled tests/build_download.rs:13
ureq::Error::BadUri tests/build_download.rs:19
ureq::Error::InvalidProxyUrl tests/build_download.rs:22 tests/build_download.rs:34
ureq::Error::TooManyRedirects tests/build_download.rs:23
ureq::Error::TlsRequired tests/build_download.rs:24
tokio::net::TcpListener::bind tests/builtin_plugin_directories_test.rs:50 tests/e2e/copilot_request_handler.rs:462 tests/e2e/copilot_request_handler.rs:475 tests/extension_launch_provider_test.rs:332 tests/extension_launch_provider_test.rs:426 tests/http_request_body_test.rs:197 tests/http_response_forwarding_test.rs:61 tests/http_response_forwarding_test.rs:467 tests/installation_confirmation_test.rs:508 tests/installation_confirmation_test.rs:570 tests/installation_confirmation_test.rs:694
tokio::net::TcpStream tests/e2e/copilot_request_handler.rs:405 tests/extension_launch_provider_test.rs:391
reqwest::Url::parse tests/e2e/mcp_oauth.rs:67 tests/e2e/runtime_host_support.rs:214 tests/e2e/runtime_host_support.rs:691 tests/e2e/runtime_host_support.rs:759 tests/runtime_host_e2e.rs:409 tests/runtime_host_e2e.rs:433
reqwest::get tests/e2e/mcp_oauth.rs:464
std::net::TcpListener::bind tests/e2e/multi_client.rs:451 tests/e2e/multi_client_commands_elicitation.rs:224 tests/e2e/pending_work_resume.rs:340 tests/e2e/session_config.rs:634 tests/runtime_host_e2e.rs:211 tests/runtime_host_e2e.rs:314
tokio::net::TcpStream::connect tests/e2e/runtime_host_support.rs:760
std::net::TcpStream tests/e2e/support.rs:798
std::net::TcpStream::connect_timeout tests/e2e/support.rs:801
reqwest::Client::new tests/fixtures/connector-runtime/src/main.rs:50
tokio::net::tcp::OwnedReadHalf tests/http_request_body_test.rs:167 tests/http_request_body_test.rs:189 tests/http_response_forwarding_test.rs:27 tests/http_response_forwarding_test.rs:54
tokio::net::tcp::OwnedWriteHalf tests/http_request_body_test.rs:190 tests/http_response_forwarding_test.rs:44 tests/http_response_forwarding_test.rs:55

low url_literal build_script 23

https://github.com/github/copilot-cli/releases/download/v{version} build/in_process.rs:494 build/in_process/tests.rs:104 build/in_process/tests.rs:154 build/in_process/tests.rs:189 build/out_of_process.rs:81
https://github.com/github/copilot-sdk/releases/download/runtime-{version} build/in_process.rs:496 build/in_process/tests.rs:152 build/in_process/tests.rs:187
https://github.com/github/copilot-sdk/releases/download/runtime-{}/{asset_name} build/in_process.rs:517
https://github.com/github/copilot-cli/releases/download/v{}/{asset_name} build/in_process.rs:522
https://github.com/github/copilot-sdk/releases/download/runtime-{VERSION} build/in_process/tests.rs:31 build/in_process/tests.rs:43
https://github.com/github/copilot-cli/releases/download/v{VERSION} build/in_process/tests.rs:45
https://github.com/github/copilot-sdk/releases/download/runtime-9.9.9 build/in_process/tests.rs:214
https://github.com/github/copilot-sdk/releases/latest build/in_process/tests.rs:215
https://github.com/github/copilot-agent-runtime/releases/download/runtime-1.2.3 build/in_process/tests.rs:216
https://token@github.com/github/copilot-sdk/releases/download/runtime-1.2.3 build/in_process/tests.rs:217
https://github.com/github/copilot-cli/releases/download/v1.2.3/ build/in_process/tests.rs:218
https://github.com/github/copilot-cli/releases/download/v1.2.3?token=secret build/in_process/tests.rs:219
http://github.com/github/copilot-cli/releases/download/v1.2.3 build/in_process/tests.rs:220
release-url=https://github.com/github/copilot-sdk/releases/download/runtime-{VERSION}\u{a} build/in_process/tests.rs:352 build/in_process/tests.rs:529
https://github.com/github/copilot-cli/releases/download/v{version}/SHA256SUMS.txt build/out_of_process.rs:259

low process_spawn test 11

std::process::Command::new tests/cli_resolution_test.rs:320 tests/e2e/client_lifecycle.rs:185 tests/e2e/runtime_host_support.rs:43 tests/e2e/support.rs:692 tests/e2e/support.rs:1272 tests/e2e/support.rs:1345 tests/extension_launch_provider_runtime_test.rs:287 tests/extension_launch_provider_runtime_test.rs:307
tokio::process::Command::new tests/e2e/client_options.rs:923 tests/e2e/client_options/windows_process_tree.rs:226 tests/e2e/mcp_oauth.rs:439

low process_spawn library 8

tokio::process::Command src/lib.rs:2219 src/process_tree.rs:14 src/process_tree.rs:132 src/process_tree/tests.rs:69 src/process_tree/tests.rs:79 src/tests.rs:239
tokio::process::Command::new src/lib.rs:2220 src/process_tree/tests.rs:70

low network_access library 7

reqwest::Client src/copilot_request_handler.rs:385
reqwest::Client::builder src/copilot_request_handler.rs:386
reqwest::redirect::Policy::none src/copilot_request_handler.rs:387
reqwest::Method::from_bytes src/copilot_request_handler.rs:399
tokio::net::TcpStream src/copilot_request_handler.rs:435
tokio::net::TcpStream::connect src/lib.rs:1507 src/lib.rs:1543

low build_script build_script 1

build.rs build.rs

low foreign_functions library 1

extern block src/embeddedcli.rs:413

info url_literal test 45

https://example.com/github.svg tests/api_types_test.rs:598 tests/api_types_test.rs:604
https://github.com/github/copilot-cli/releases/download/v{version} tests/cli_resolution_test.rs:248
https://github.com/github/copilot-sdk/releases/download/runtime-{version} tests/cli_resolution_test.rs:252
https://byok-endpoint.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:20
https://byok-red.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:22
https://byok-blue.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:24
https://example.com/counter/{} tests/e2e/canvas.rs:85
https://example.com/counter/counter-1 tests/e2e/canvas.rs:195
https://tenant.ghe.example tests/e2e/client.rs:113
https://fallback.ghe.example tests/e2e/client.rs:115
https://github.com tests/e2e/client.rs:116 tests/fixtures/connector-runtime/src/main.rs:122
https://models.example.test/v1 tests/e2e/client_options.rs:185 tests/e2e/client_options.rs:215
https://github.com/github/copilot-sdk/pull/610 tests/e2e/client_options.rs:442
{scheme}://{authority}{path_and_query} tests/e2e/copilot_request_handler.rs:323
https://byok.invalid/v1 tests/e2e/copilot_request_handler.rs:758
https://github.com/copilot/cli/client-metadata.json tests/e2e/mcp_oauth.rs:25
https://alpha.example.test/v1 tests/e2e/multi_provider_registry.rs:34
https://beta.example.test tests/e2e/multi_provider_registry.rs:39
ahp-root:// tests/e2e/runtime_host_support.rs:28
https://api.github.com tests/e2e/runtime_host_support.rs:335 tests/e2e/runtime_host_support.rs:355
https://github.com/github/copilot-sdk/issues/1234 tests/e2e/session.rs:1576
https://api.openai.com/v1 tests/e2e/session.rs:1738 tests/e2e/session.rs:1804
https://my-resource.openai.azure.com tests/e2e/session.rs:1766
https://anthropic-citations.invalid/v1 tests/e2e/session_config.rs:489
Listening: (http://[^\s]+)\s+(\{.*\})$ tests/e2e/support.rs:1370
http:// tests/e2e/support.rs:1600
http://unused.test tests/http_response_forwarding_test.rs:187 tests/http_response_forwarding_test.rs:347 tests/http_response_forwarding_test.rs:365 tests/http_response_forwarding_test.rs:419 tests/http_response_forwarding_test.rs:448
http://{}/stream tests/http_response_forwarding_test.rs:468
https://example.test/mcp tests/mcp_plan_transport_choice_test.rs:55
https://example.test/{} tests/session_test.rs:296
{"resource":"https://example.com/mcp"} tests/session_test.rs:961
https://example.com tests/session_test.rs:3021 tests/session_test.rs:3031 tests/session_test.rs:3041
https://example.test/counter tests/session_test.rs:6934
https://example.test/counter-updated tests/session_test.rs:7079

info url_literal library 24

ws://127.0.0.1:4321 src/ahp_host/tests.rs:153 src/ahp_host/tests.rs:159
http://127.0.0.1:4321 src/ahp_host/tests.rs:205
https://example.test/{} src/canvas/tests.rs:24
https://example.test/echo src/canvas/tests.rs:73
http://collector:4318 src/tests.rs:249 src/tests.rs:256 src/tests.rs:289 src/tests.rs:305 src/tests.rs:353 src/tests.rs:366
http://from-config:4318 src/tests.rs:384
http://from-user-env:4318 src/tests.rs:389 src/tests.rs:396
file:///tmp/data.bin src/tool/tests.rs:169
file:///tmp/report.pdf src/tool/tests.rs:227
https://api.example.com/v1 src/types/tests.rs:756 src/types/tests.rs:775
https://example.openai.azure.com src/types/tests.rs:798
https://example.com/oauth/client-metadata.json src/types/tests.rs:959
https://api.example.com src/types/tests.rs:1405 src/types/tests.rs:1418 src/types/tests.rs:1445
https://example.com/issues/7 src/types/tests.rs:1837

info unsafe_code library 6

1 unsafe blocks, functions or impls src/embeddedcli.rs:421
18 unsafe blocks, functions or impls src/ffi.rs:55
3 unsafe blocks, functions or impls src/ffi/shutdown_tests.rs:17 src/ffi/tests.rs:18
15 unsafe blocks, functions or impls src/process_tree.rs:86
8 unsafe blocks, functions or impls src/process_tree/tests.rs:90

info unsafe_code test 6

2 unsafe blocks, functions or impls tests/cli_resolution_test.rs:35 tests/e2e/client_lifecycle.rs:259
5 unsafe blocks, functions or impls tests/e2e/client_options/windows_process_tree.rs:20 tests/http_request_body_test.rs:62 tests/session_fs_reply_test.rs:64
7 unsafe blocks, functions or impls tests/e2e/support.rs:1131

Run: check

failed

Ended: agent reported the end
Guest: exit code 101
Run time: 1 min 26 s
VM restore: 73 ms
Payload: 12940 files, 289.0 MiB
Files opened: 23574

Processes 392

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 362 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	1 min 26 s	25856
└rustc /usr/local/bin/rustc ×37	--crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow	347 ms	639 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcoBEsAA/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib	841 ms	141 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccLpaz7W.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcoBEsAA/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	848 ms	134 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccLpaz7W.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcoBEsAA/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6	851 ms	130 ms	0
└build_script proc-macro2		990 ms	80 ms	0
└rustc /usr/local/bin/rustc ×3	--version	991 ms	7 ms	0
└rustc /usr/local/bin/rustc	--cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu	999 ms	32 ms	256
└rustc /usr/local/bin/rustc ×186	--crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	1.0 s	50 ms	0
└build_script quote		1.2 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	1.2 s	7 ms	0
└build_script libc		2.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	2.1 s	7 ms	0
└build_script openssl-sys		14.3 s	73 ms	0
└other /usr/bin/pkg-config ×2	--libs --cflags openssl	14.3 s	1 ms	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/openssl-sys-e32807f77cf71cfc/out/66151643851466906detect_compiler_family.c	14.3 s	22 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-e32807f77cf71cfc/out/66151643851466906detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 66151643851466906detect_compiler_family.c -dumpbase-ext .c	14.3 s	19 ms	0
└toolchain /usr/bin/cc	-?	14.4 s	3 ms	256
└toolchain /usr/bin/cc	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/openssl-sys-e32807f77cf71cfc/out/flag_check -c /work/target/debug/build/openssl-sys-e32807f77cf71cfc/out/flag_check.c	14.4 s	33 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-e32807f77cf71cfc/out/flag_check.c -quiet -dumpdir /work/target/debug/build/openssl-sys-e32807f77cf71cfc/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccYfSPJM.s	14.4 s	24 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/openssl-sys-e32807f77cf71cfc/out/flag_check /tmp/ccYfSPJM.s	14.4 s	6 ms	0
└build_script generic-array		16.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--verbose --version	16.8 s	7 ms	0
└build_script openssl		17.7 s	1 ms	0
└build_script serde_core		24.5 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	24.5 s	8 ms	0
└build_script rustix		25.6 s	35 ms	0
└rustc /usr/local/bin/rustc ×2	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-8273b0e35e9c3920/out/rustix_test_can_compile -	25.6 s	16 ms	0
└build_script httparse		28.0 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	28.0 s	7 ms	0
└build_script icu_normalizer_data		28.3 s	1 ms	0
└build_script icu_properties_data		28.3 s	1 ms	0
└build_script native-tls		32.5 s	2 ms	0
└build_script crc32fast		32.5 s	8 ms	0
└rustc /usr/local/bin/rustc	--version	32.5 s	6 ms	0
└build_script zerocopy		33.0 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	33.0 s	7 ms	0
└build_script zmij		33.0 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	33.0 s	7 ms	0
└build_script getrandom		33.0 s	1 ms	0
└build_script httparse		39.3 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	39.3 s	7 ms	0
└build_script native-tls		45.5 s	2 ms	0
└build_script serde_core		49.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	49.8 s	7 ms	0
└build_script serde_json		1 min 0 s	1 ms	0
└build_script thiserror		1 min 0 s	28 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-2a2ace9117c7add0/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	1 min 0 s	16 ms	256
└rustc /usr/local/bin/rustc	--version	1 min 0 s	7 ms	0
└build_script crc32fast		1 min 10 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	1 min 10 s	7 ms	0
└build_script parking_lot_core		1 min 12 s	1 ms	0
└build_script getrandom		1 min 12 s	2 ms	0
└build_script serde		1 min 18 s	11 ms	0
└rustc /usr/local/bin/rustc	--version	1 min 18 s	8 ms	0
└build_script serde_json		1 min 18 s	1 ms	0
└build_script github-copilot-sdk		1 min 26 s	67 ms	25856

Network 2

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI github.com, inside TLS: GET /github/copilot-cli/releases/download/v1.0.98-2/github-copilot-1.0.98-2-linux-x64.tgz, host github.com, agent ureq/3.4.2	1.5 KiB

Sockets in the trace 3

When	Program	How	Address	Type
1 min 26 s	/work/target/debug/build/github-copilot-sdk-901696ff33238755/build-script-build	connect	unix:/var/run/nscd/socket	stream
1 min 26 s	/work/target/debug/build/github-copilot-sdk-901696ff33238755/build-script-build	connect	:53	datagram
1 min 26 s	/work/target/debug/build/github-copilot-sdk-901696ff33238755/build-script-build	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 1607
Directories: 354
Size: 590.2 MiB
Compiled units: 265

Nothing outside the build areas.

Output

Standard error

   Compiling proc-macro2 v1.0.107
   Compiling unicode-ident v1.0.27
   Compiling quote v1.0.47
   Compiling libc v0.2.190
   Compiling syn v3.0.9
   Compiling find-msvc-tools v0.1.14
   Compiling shlex v2.0.1
   Compiling cc v1.8.0
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
   Compiling openssl-sys v0.9.117
   Compiling synstructure v0.14.0
   Compiling syn v2.0.119
   Compiling zerofrom-derive v0.1.8
    Checking bytes v1.12.1
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
    Checking futures-core v0.3.34
    Checking errno v0.3.14
   Compiling zerovec-derive v0.11.6
   Compiling openssl v0.10.81
    Checking zerovec v0.11.8
    Checking signal-hook-registry v1.4.8
   Compiling openssl-macros v0.1.1
    Checking mio v1.2.4
    Checking socket2 v0.6.5
   Compiling displaydoc v0.2.7
   Compiling tokio-macros v2.7.2
   Compiling cfg-if v1.0.5
    Checking tokio v1.53.3
    Checking bitflags v2.13.2
    Checking futures-sink v0.3.34
    Checking smallvec v1.16.3
    Checking http v1.5.0
   Compiling serde_core v1.0.229
    Checking tinystr v0.8.4
    Checking writeable v0.6.4
   Compiling rustix v1.1.5
    Checking litemap v0.8.3
    Checking slab v0.4.12
    Checking icu_locale_core v2.3.0
    Checking zerotrie v0.2.5
    Checking potential_utf v0.1.6
   Compiling icu_properties_data v2.3.0
   Compiling icu_normalizer_data v2.3.0
    Checking utf8_iter v1.0.4
   Compiling httparse v1.10.1
    Checking foreign-types-shared v0.1.1
    Checking foreign-types v0.3.2
    Checking icu_collections v2.3.0
    Checking icu_provider v2.3.1
   Compiling futures-macro v0.3.34
   Compiling typenum v1.20.1
    Checking futures-task v0.3.34
    Checking equivalent v1.0.3
   Compiling getrandom v0.3.4
   Compiling zmij v1.0.23
   Compiling zerocopy v0.8.63
    Checking hashbrown v0.17.1
   Compiling crc32fast v1.5.2
   Compiling native-tls v0.2.18
   Compiling log v0.4.34
    Checking once_cell v1.21.4
    Checking tracing-core v0.1.36
    Checking indexmap v2.14.2
    Checking futures-util v0.3.34
    Checking http-body v1.1.0
    Checking tokio-util v0.7.20
   Compiling tracing-attributes v0.1.31
   Compiling simd-adler32 v0.3.10
    Checking percent-encoding v2.3.2
   Compiling zeroize v1.9.1
   Compiling itoa v1.0.18
    Checking openssl-probe v0.2.1
    Checking tracing v0.1.44
    Checking icu_normalizer v2.3.0
    Checking icu_properties v2.3.0
    Checking atomic-waker v1.1.2
   Compiling adler2 v2.0.1
    Checking try-lock v0.2.5
   Compiling linux-raw-sys v0.12.1
    Checking fnv v1.0.7
   Compiling base64ct v1.8.3
    Checking tower-service v0.3.3
   Compiling pem-rfc7468 v1.0.0
    Checking h2 v0.4.20
    Checking want v0.3.2
   Compiling miniz_oxide v0.9.1
    Checking ppv-lite86 v0.2.21
    Checking rand_core v0.9.5
    Checking idna_adapter v1.2.2
   Compiling rustls-pki-types v1.15.1
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
    Checking futures-channel v0.3.34
   Compiling bumpalo v3.20.3
   Compiling zlib-rs v0.6.8
   Compiling thiserror v2.0.21
   Compiling serde_json v1.0.154
    Checking memchr v2.8.3
   Compiling base64 v0.23.1
   Compiling option-ext v0.2.0
   Compiling dirs-sys v0.4.1
   Compiling ureq-proto v0.6.4
   Compiling flate2 v1.1.10
   Compiling zopfli v0.8.4
    Checking hyper v1.12.0
    Checking digest v0.10.7
   Compiling webpki-root-certs v1.0.9
    Checking idna v1.1.0
    Checking rand_chacha v0.9.0
   Compiling xattr v1.6.1
   Compiling der v0.8.2
    Checking tokio-native-tls v0.3.1
    Checking form_urlencoded v1.2.2
   Compiling filetime v0.2.29
    Checking sync_wrapper v1.0.2
   Compiling thiserror-impl v2.0.21
   Compiling getrandom v0.4.3
   Compiling parking_lot_core v0.9.12
   Compiling typed-path v0.12.3
    Checking cpufeatures v0.2.17
    Checking tower-layer v0.3.3
    Checking ipnet v2.12.2
   Compiling utf8-zero v0.8.1
   Compiling sha2 v0.10.9
   Compiling ureq v3.4.2
    Checking hyper-util v0.1.21
    Checking tower v0.5.3
    Checking sha1 v0.10.7
   Compiling zip v7.2.0
   Compiling tar v0.4.46
    Checking url v2.5.8
    Checking rand v0.9.5
   Compiling dirs v5.0.1
    Checking aho-corasick v1.1.5
    Checking http-body-util v0.1.5
    Checking utf-8 v0.7.6
    Checking regex-syntax v0.8.11
    Checking scopeguard v1.2.0
    Checking data-encoding v2.11.1
   Compiling serde v1.0.229
    Checking tungstenite v0.28.0
    Checking lock_api v0.4.14
    Checking regex-automata v0.4.18
    Checking hyper-tls v0.6.0
   Compiling github-copilot-sdk v1.0.22-preview.2
    Checking tower-http v0.6.11
   Compiling serde_derive v1.0.229
    Checking foldhash v0.2.0
    Checking parking_lot v0.12.5
    Checking uuid v1.28.0
    Checking reqwest v0.13.5
warning: github-copilot-sdk@1.0.22-preview.2: Downloading https://github.com/github/copilot-cli/releases/download/v1.0.98-2/github-copilot-1.0.98-2-linux-x64.tgz
error: failed to run custom build command for `github-copilot-sdk v1.0.22-preview.2`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/github-copilot-sdk-901696ff33238755/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=COPILOT_SKIP_CLI_DOWNLOAD
  cargo:rerun-if-env-changed=COPILOT_CLI_EXTRACT_DIR
  cargo:rerun-if-env-changed=BUNDLED_CLI_CACHE_DIR
  cargo::rustc-check-cfg=cfg(has_bundled_cli)
  cargo::rustc-check-cfg=cfg(has_extracted_cli)
  cargo:rerun-if-changed=cli-version.txt
  cargo:rerun-if-changed=cli-version-in-process.txt
  cargo:rustc-env=COPILOT_SDK_CLI_VERSION=1.0.98-2
  cargo:rustc-env=COPILOT_SDK_CLI_CACHE_ID=1.0.98-2
  cargo:warning=Downloading https://github.com/github/copilot-cli/releases/download/v1.0.98-2/github-copilot-1.0.98-2-linux-x64.tgz

  --- stderr

  thread 'main' (2522) panicked at /cw/vendor/github-copilot-sdk-1.0.22-preview.2/build/in_process.rs:1000:25:
  Failed to download https://github.com/github/copilot-cli/releases/download/v1.0.98-2/github-copilot-1.0.98-2-linux-x64.tgz: HTTP 404 Not Found
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-10-14 04:38 UTC	Discovered	Fetched	fetched	fetcher-286769
2026-10-14 04:38 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-286807
2026-10-14 04:38 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-289279-slot2
2026-10-14 04:39 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-289279-slot2
2026-10-14 04:39 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-289309
2026-10-14 04:39 UTC	Scored	Done	finalized	analyzer-289309