Crateward

github-copilot-sdk 1.0.23-preview.2

Done dynamic on Linux job 175300 crates.io SBOM Findings (VEX) Compare with 1.0.23-preview.1

high severity downloader_pattern in build_script code: ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:417

46
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
30static:downloader_pattern
static · github-copilot-sdk
build/download.rs:6high severity downloader_pattern in build_script code: ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:417
10network_lookup
network
github.comThe build looked up github.com.
3exec_interpreter
trace · openssl-sys
/usr/bin/perlThe build ran /usr/bin/perl.
3exec_shell
trace · openssl-sys
/bin/shThe build ran /bin/sh.
7 without points
SignalWhereWhat
static:build_script
static · github-copilot-sdk
build.rslow severity build_script in build_script code: build.rs
static:network_access
static · github-copilot-sdk
build/download.rs:6medium severity network_access in build_script code (87 places): ureq::Error
static:process_spawn
static · github-copilot-sdk
build/in_process/tests.rs:417medium severity process_spawn in build_script code (22 places): std::process::Command
static:secret_environment_variable
static · github-copilot-sdk
tests/e2e/support.rs:674medium severity secret_environment_variable in test code (4 places): GH_TOKEN
static:shell_command
static · github-copilot-sdk
tests/e2e/mode_empty.rs:32medium severity shell_command in test code (2 places): powershell
static:url_literal
static · github-copilot-sdk
build/in_process.rs:494low severity url_literal in build_script code (97 places): https://github.com/github/copilot-cli/releases/download/v{version}
static:windows_api
static · github-copilot-sdk
src/generated/rpc.rs:17328medium severity windows_api in library code: ShellExecuteUserRequestedRequest

Behavior

Profile

exec:interpreter exec:shell net:github.com static:downloader_pattern static:network_access static:process_spawn static:secret_environment_variable static:shell_command static:windows_api

Static findings

17 groups
high downloader_pattern build_script 1
  • ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:417 build/download.rs:6
medium network_access build_script 26
medium secret_environment_variable test 4
medium process_spawn build_script 2
medium shell_command test 2
medium windows_api library 1
low network_access test 49
low url_literal build_script 23
low network_access library 12
low process_spawn test 11
low process_spawn library 9
low build_script build_script 1
low foreign_functions library 1
info url_literal test 46
info url_literal library 28
info unsafe_code library 6
info unsafe_code test 6

Run: check

failed
Ended
agent reported the end
Guest
exit code 101
Run time
5 min 4 s
VM restore
88 ms
Payload
14379 files, 243.5 MiB
Files opened
344917

Processes 2000

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 5 ms 5 min 4 s 25856
└rustc /usr/local/bin/rustc ×10 --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow 344 ms 860 ms 0
└toolchain /usr/bin/cc -m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcnJKVEA/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib 1.0 s 193 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc3zhAe2.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcnJKVEA/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L 1.0 s 176 ms 0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc3zhAe2.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcnJKVEA/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 1.0 s 171 ms 0
└build_script proc-macro2 1.2 s 86 ms 0
└rustc /usr/local/bin/rustc ×3 --version 1.2 s 9 ms 0
└rustc /usr/local/bin/rustc --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu 1.2 s 34 ms 256
└rustc /usr/local/bin/rustc ×28 --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow 1.4 s 52 ms 0
└build_script quote 1.9 s 10 ms 0
└rustc /usr/local/bin/rustc --version 1.9 s 7 ms 0
└build_script libc 2.4 s 11 ms 0
└rustc /usr/local/bin/rustc --version 2.4 s 9 ms 0
└build_script openssl-sys 24.1 s 3 min 39 s 0
└toolchain /usr/bin/cc -E /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/17925467554306572574detect_compiler_family.c 24.5 s 26 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/17925467554306572574detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 17925467554306572574detect_compiler_family.c -dumpbase-ext .c 24.5 s 22 ms 0
└toolchain /usr/bin/cc -? 24.5 s 3 ms 256
└toolchain /usr/bin/cc -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/flag_check -c /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/flag_check.c 24.5 s 33 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/flag_check.c -quiet -dumpdir /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/cc5gT5Jx.s 24.5 s 24 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/flag_check /tmp/cc5gT5Jx.s 24.5 s 7 ms 0
└other /usr/bin/perl ./Configure --prefix=/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install --openssldir=/usr/local/ssl no-shared no-module no-tests no-comp no-zlib no-zlib-dynamic --libdir=lib no-ssl3 no-md2 no-rc5 no-weak-ssl-ciphers no-camellia no-idea no-seed linux-x86_64 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -w 24.5 s 12.2 s 0
└toolchain /usr/bin/cc -dM -E -x c /dev/null 25.9 s 10 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /dev/null -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dM -dumpbase null 25.9 s 8 ms 0
└toolchain /usr/bin/g++ -dM -E -x c /dev/null 25.9 s 11 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /dev/null -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dM -dumpbase null 25.9 s 6 ms 0
└toolchain /usr/bin/cc -Wa,--help -c -o null.1014.o -x assembler /dev/null 25.9 s 3 ms 0
└toolchain /usr/bin/as --64 --help -o null.1014.o /dev/null 26.0 s 1 ms 0
└other /usr/bin/perl configdata.pm 33.2 s 3.6 s 0
└other /usr/bin/make depend 36.8 s 111 ms 0
└other /bin/sh ×2 -c : 36.8 s 1 ms 0
└other /bin/sh -c /usr/bin/perl ./util/add-depends.pl "gcc" 36.8 s 86 ms 0
└other /usr/bin/perl ./util/add-depends.pl gcc 36.8 s 84 ms 0
└other /usr/bin/make build_libs 36.9 s 3 min 25 s 0
└other /bin/sh ×110 -c /usr/bin/perl util/mkinstallvars.pl COMMENT="This file should be used when building against this OpenSSL build, and should never be installed" PREFIX=. BINDIR=apps APPLINKDIR=ms LIBDIR= INCLUDEDIR=include "INCLUDEDIR=./include" ENGINESDIR=engines MODULESDIR=providers "VERSION=3.6.3" "LDLIBS=-ldl -pthread " > builddata.pm 36.9 s 12 ms 0
└other /usr/bin/perl util/mkinstallvars.pl COMMENT=This file should be used when building against this OpenSSL build, and should never be installed PREFIX=. BINDIR=apps APPLINKDIR=ms LIBDIR= INCLUDEDIR=include INCLUDEDIR=./include ENGINESDIR=engines MODULESDIR=providers VERSION=3.6.3 LDLIBS=-ldl -pthread 36.9 s 12 ms 0
└other /bin/sh -c "make" depend && "make" _build_libs 47.1 s 3 min 14 s 0
└other /usr/bin/make depend 47.1 s 108 ms 0
└other /bin/sh ×2 -c : 47.1 s 0 ms 0
└other /bin/sh -c /usr/bin/perl ./util/add-depends.pl "gcc" 47.1 s 87 ms 0
└other /usr/bin/perl ./util/add-depends.pl gcc 47.1 s 85 ms 0
└other /usr/bin/make _build_libs 47.2 s 3 min 14 s 0
└other /bin/sh ×190 -c cc -I. -Iinclude -Iapps/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3\"" -DMODULESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules\"" -D… 47.2 s 138 ms 0
└toolchain /usr/bin/cc -I. -Iinclude -Iapps/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="/usr/local/ssl" -DENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -DMODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -MMD -MF apps/lib/libapps-lib-app_libctx.d.tmp -c -o 47.2 s 137 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -I . -I include -I apps/include -imultiarch x86_64-linux-gnu -MMD apps/lib/libapps-lib-app_libctx.d -MF apps/lib/libapps-lib-app_libctx.d.tmp -MQ apps/lib/libapps-lib-app_libctx.o -D_REENTRANT -D OPENSSL_USE_NODELETE -D L_ENDIAN -D OPENSSL_PIC -D OPENSSLDIR="/usr/local/ssl" -D ENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -D MODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -D OPENSSL_BUILDING_OPENSSL -D 47.2 s 132 ms 0
└toolchain /usr/bin/as -I . -I include -I apps/include --gdwarf-4 --64 --noexecstack -o apps/lib/libapps-lib-app_libctx.o /tmp/ccJVKDGC.s 47.4 s 2 ms 0
└other /usr/bin/touch ×189 apps/lib/libapps-lib-app_libctx.d.tmp 47.4 s 1 ms 0
└other /bin/sh ×189 -c if cmp apps/lib/libapps-lib-app_libctx.d.tmp apps/lib/libapps-lib-app_libctx.d > /dev/null 2> /dev/null; then \\u{a}\u{9}rm -f apps/lib/libapps-lib-app_libctx.d.tmp; \\u{a}else \\u{a}\u{9}mv apps/lib/libapps-lib-app_libctx.d.tmp apps/lib/libapps-lib-app_libctx.d; \\u{a}fi 47.4 s 5 ms 0
└other /usr/bin/cmp apps/lib/libapps-lib-app_libctx.d.tmp apps/lib/libapps-lib-app_libctx.d 47.4 s 1 ms 512
└other /usr/bin/mv apps/lib/libapps-lib-app_libctx.d.tmp apps/lib/libapps-lib-app_libctx.d 47.4 s 3 ms 0
└other /bin/sh ×13 -c CC="cc" /usr/bin/perl crypto/aes/asm/aes-cfb-avx512.pl "elf" -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3\"" -DMODULESDIR="… 51.4 s 150 ms 0
└other /usr/bin/perl crypto/aes/asm/aes-cfb-avx512.pl elf -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="/usr/local/ssl" -DENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -DMODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -DAES_ASM -DBSAES_ASM 51.4 s 147 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 51.4 s 3 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 51.4 s 2 ms 0
└other /bin/sh -c "/usr/bin/perl" "crypto/aes/asm/../../perlasm/x86_64-xlate.pl" elf "crypto/aes/aes-cfb-avx512.s" 51.4 s 140 ms 0
└other /usr/bin/perl crypto/aes/asm/../../perlasm/x86_64-xlate.pl elf crypto/aes/aes-cfb-avx512.s 51.4 s 138 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 51.5 s 4 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 51.5 s 2 ms 0
└other /bin/sh ×5 -c CC="cc" /usr/bin/perl crypto/aes/asm/aes-x86_64.pl "elf" -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3\"" -DMODULESDIR="\"/w… 51.6 s 88 ms 0
└other /usr/bin/perl crypto/aes/asm/aes-x86_64.pl elf -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="/usr/local/ssl" -DENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -DMODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -DAES_ASM -DBSAES_ASM 51.6 s 87 ms 0
└other /bin/sh -c "/usr/bin/perl" "crypto/aes/asm/../../perlasm/x86_64-xlate.pl" elf "crypto/aes/aes-x86_64.s" 51.6 s 76 ms 0
└other /usr/bin/perl crypto/aes/asm/../../perlasm/x86_64-xlate.pl elf crypto/aes/aes-x86_64.s 51.6 s 74 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 51.6 s 3 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 51.6 s 2 ms 0
└other /bin/sh ×3 -c CC="cc" /usr/bin/perl crypto/bn/asm/rsaz-x86_64.pl "elf" -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3\"" -DMODULESDIR="\"/w… 1 min 12 s 68 ms 0
└other /usr/bin/perl crypto/bn/asm/rsaz-x86_64.pl elf -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="/usr/local/ssl" -DENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -DMODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -DAES_ASM -DBSAES_ASM 1 min 12 s 67 ms 0
└other /bin/sh -c "/usr/bin/perl" "crypto/bn/asm/../../perlasm/x86_64-xlate.pl" elf "crypto/bn/rsaz-x86_64.s" 1 min 12 s 63 ms 0
└other /usr/bin/perl crypto/bn/asm/../../perlasm/x86_64-xlate.pl elf crypto/bn/rsaz-x86_64.s 1 min 12 s 61 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 1 min 12 s 3 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 1 min 12 s 2 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 1 min 12 s 6 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 1 min 12 s 5 ms 0

23567 more processes not listed

Network 2

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

DestinationProtocolWhat was sentBytes
:443tlsSNI github.com, inside TLS: GET /github/copilot-cli/releases/download/v1.0.99-2/github-copilot-1.0.99-2-linux-x64.tgz, host github.com, agent ureq/3.4.21.5 KiB
Sockets in the trace 3
WhenProgramHowAddressType
5 min 4 sconnectunix:/var/run/nscd/socketstream
5 min 4 sconnect:53datagram
5 min 4 sconnect:443stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
1718
Directories
358
Size
654.3 MiB
Compiled units
257
Scan
stopped at a limit

Nothing outside the build areas.

Output

Standard error
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.27
   Compiling libc v0.2.190
   Compiling syn v3.0.9
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling cc v1.8.0
   Compiling vcpkg v0.2.15
   Compiling pkg-config v0.3.34
   Compiling synstructure v0.14.0
   Compiling syn v2.0.119
   Compiling zerofrom-derive v0.1.8
    Checking bytes v1.12.1
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
    Checking futures-core v0.3.34
    Checking errno v0.3.14
   Compiling zerovec-derive v0.11.6
    Checking zerovec v0.11.8
    Checking signal-hook-registry v1.4.8
   Compiling openssl-macros v0.1.1
   Compiling openssl-src v300.6.1+3.6.3
    Checking socket2 v0.6.5
    Checking mio v1.2.4
   Compiling tokio-macros v2.7.2
   Compiling displaydoc v0.2.7
    Checking tokio v1.53.3
   Compiling openssl-sys v0.9.117
    Checking futures-sink v0.3.34
    Checking smallvec v1.16.3
    Checking bitflags v2.13.2
   Compiling cfg-if v1.0.5
    Checking http v1.5.0
   Compiling serde_core v1.0.229
    Checking tinystr v0.8.4
    Checking litemap v0.8.3
    Checking writeable v0.6.4
    Checking slab v0.4.12
   Compiling version_check v0.9.5
   Compiling rustix v1.1.5
   Compiling generic-array v0.14.7
    Checking icu_locale_core v2.3.0
    Checking zerotrie v0.2.5
    Checking potential_utf v0.1.6
   Compiling icu_properties_data v2.3.0
   Compiling icu_normalizer_data v2.3.0
   Compiling httparse v1.10.1
   Compiling openssl v0.10.81
    Checking utf8_iter v1.0.4
    Checking foreign-types-shared v0.1.1
    Checking foreign-types v0.3.2
    Checking icu_collections v2.3.0
    Checking icu_provider v2.3.1
   Compiling futures-macro v0.3.34
   Compiling native-tls v0.2.18
   Compiling typenum v1.20.1
   Compiling zmij v1.0.23
    Checking hashbrown v0.17.1
    Checking once_cell v1.21.4
    Checking equivalent v1.0.3
    Checking futures-task v0.3.34
    Checking futures-util v0.3.34
    Checking hybrid-array v0.4.15
    Checking indexmap v2.14.2
    Checking tracing-core v0.1.36
    Checking http-body v1.1.0
    Checking tokio-util v0.7.20
   Compiling tracing-attributes v0.1.31
   Compiling zeroize v1.9.1
    Checking rand_core v0.10.1
   Compiling itoa v1.0.18
   Compiling getrandom v0.4.3
    Checking percent-encoding v2.3.2
    Checking openssl-probe v0.2.1
   Compiling crc32fast v1.5.2
    Checking tracing v0.1.44
    Checking icu_normalizer v2.3.0
    Checking icu_properties v2.3.0
   Compiling linux-raw-sys v0.12.1
   Compiling log v0.4.34
   Compiling base64ct v1.8.3
    Checking atomic-waker v1.1.2
    Checking tower-service v0.3.3
    Checking cpufeatures v0.3.1
    Checking try-lock v0.2.5
    Checking fnv v1.0.7
   Compiling adler2 v2.0.1
   Compiling simd-adler32 v0.3.10
   Compiling miniz_oxide v0.9.1
    Checking h2 v0.4.20
    Checking want v0.3.2
   Compiling pem-rfc7468 v1.0.0
    Checking idna_adapter v1.2.2
   Compiling rustls-pki-types v1.15.1
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
    Checking block-buffer v0.12.1
    Checking crypto-common v0.2.2
    Checking futures-channel v0.3.34
   Compiling base64 v0.23.1
   Compiling thiserror v2.0.21
   Compiling option-ext v0.2.0
    Checking memchr v2.8.3
    Checking const-oid v0.10.2
   Compiling serde_json v1.0.154
    Checking digest v0.11.3
   Compiling dirs-sys v0.5.0
   Compiling ureq-proto v0.6.4
    Checking hyper v1.12.0
   Compiling digest v0.10.7
   Compiling webpki-root-certs v1.0.9
   Compiling flate2 v1.1.10
    Checking idna v1.1.0
   Compiling xattr v1.6.1
   Compiling der v0.8.2
    Checking chacha20 v0.10.2
    Checking tokio-native-tls v0.3.1
    Checking form_urlencoded v1.2.2
   Compiling filetime v0.2.29
    Checking sync_wrapper v1.0.2
   Compiling thiserror-impl v2.0.21
   Compiling utf8-zero v0.8.1
    Checking tower-layer v0.3.3
   Compiling typed-path v0.12.3
   Compiling parking_lot_core v0.9.12
    Checking ipnet v2.12.2
   Compiling cpufeatures v0.2.17
    Checking hyper-util v0.1.21
   Compiling sha2 v0.10.9
   Compiling zip v9.0.3
    Checking tower v0.5.3
   Compiling ureq v3.4.2
   Compiling tar v0.4.46
    Checking url v2.5.8
    Checking rand v0.10.3
   Compiling dirs v7.0.0
    Checking sha1 v0.11.0
    Checking aho-corasick v1.1.5
    Checking http-body-util v0.1.5
    Checking regex-syntax v0.8.11
   Compiling serde v1.0.229
    Checking scopeguard v1.2.0
    Checking data-encoding v2.11.1
    Checking tungstenite v0.30.0
    Checking lock_api v0.4.14
    Checking regex-automata v0.4.18
    Checking hyper-tls v0.6.0
   Compiling github-copilot-sdk v1.0.23-preview.2
    Checking tower-http v0.6.11
   Compiling serde_derive v1.0.229
    Checking foldhash v0.2.0
    Checking parking_lot v0.12.5
    Checking reqwest v0.13.5
warning: github-copilot-sdk@1.0.23-preview.2: Downloading https://github.com/github/copilot-cli/releases/download/v1.0.99-2/github-copilot-1.0.99-2-linux-x64.tgz
error: failed to run custom build command for `github-copilot-sdk v1.0.23-preview.2`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/github-copilot-sdk-e877d8cdb61a68da/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=COPILOT_SKIP_CLI_DOWNLOAD
  cargo:rerun-if-env-changed=COPILOT_CLI_EXTRACT_DIR
  cargo:rerun-if-env-changed=BUNDLED_CLI_CACHE_DIR
  cargo::rustc-check-cfg=cfg(has_bundled_cli)
  cargo::rustc-check-cfg=cfg(has_extracted_cli)
  cargo:rerun-if-changed=cli-version.txt
  cargo:rerun-if-changed=cli-version-in-process.txt
  cargo:rustc-env=COPILOT_SDK_CLI_VERSION=1.0.99-2
  cargo:rustc-env=COPILOT_SDK_CLI_CACHE_ID=1.0.99-2
  cargo:warning=Downloading https://github.com/github/copilot-cli/releases/download/v1.0.99-2/github-copilot-1.0.99-2-linux-x64.tgz

  --- stderr

  thread 'main' (12949) panicked at /cw/vendor/github-copilot-sdk-1.0.23-preview.2/build/in_process.rs:1004:25:
  Failed to download https://github.com/github/copilot-cli/releases/download/v1.0.99-2/github-copilot-1.0.99-2-linux-x64.tgz: HTTP 404 Not Found
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

6
WhenFromToEventWorker
2026-10-16 01:03 UTCDiscoveredFetchedfetchedfetcher-286769
2026-10-16 01:03 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-286807
2026-10-16 01:03 UTCReadyForSandboxRunningsandbox_startedorchestrator-289279-slot2
2026-10-16 01:09 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-289279-slot2
2026-10-16 01:09 UTCDynamicallyAnalyzedScoredscoredanalyzer-289309
2026-10-16 01:09 UTCScoredDonefinalizedanalyzer-289309