Crateward

github-copilot-sdk 1.0.23-preview.3

Done dynamic on Linux job 180555 crates.io SBOM Findings (VEX) Compare with 1.0.23-preview.2

high severity downloader_pattern in build_script code: ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:417

46
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
30static:downloader_pattern
static · github-copilot-sdk
build/download.rs:6high severity downloader_pattern in build_script code: ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:417
10network_lookup
network
github.comThe build looked up github.com.
3exec_interpreter
trace · openssl-sys
/usr/bin/perlThe build ran /usr/bin/perl.
3exec_shell
trace · openssl-sys
/bin/shThe build ran /bin/sh.
7 without points
SignalWhereWhat
static:build_script
static · github-copilot-sdk
build.rslow severity build_script in build_script code: build.rs
static:network_access
static · github-copilot-sdk
build/download.rs:6medium severity network_access in build_script code (87 places): ureq::Error
static:process_spawn
static · github-copilot-sdk
build/in_process/tests.rs:417medium severity process_spawn in build_script code (22 places): std::process::Command
static:secret_environment_variable
static · github-copilot-sdk
tests/e2e/support.rs:674medium severity secret_environment_variable in test code (4 places): GH_TOKEN
static:shell_command
static · github-copilot-sdk
tests/e2e/mode_empty.rs:32medium severity shell_command in test code (2 places): powershell
static:url_literal
static · github-copilot-sdk
build/in_process.rs:494low severity url_literal in build_script code (97 places): https://github.com/github/copilot-cli/releases/download/v{version}
static:windows_api
static · github-copilot-sdk
src/generated/rpc.rs:17328medium severity windows_api in library code: ShellExecuteUserRequestedRequest

Behavior

Profile

exec:interpreter exec:shell net:github.com static:downloader_pattern static:network_access static:process_spawn static:secret_environment_variable static:shell_command static:windows_api

Static findings

17 groups
high downloader_pattern build_script 1
  • ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:417 build/download.rs:6
medium network_access build_script 26
medium secret_environment_variable test 4
medium process_spawn build_script 2
medium shell_command test 2
medium windows_api library 1
low network_access test 49
low url_literal build_script 23
low network_access library 12
low process_spawn test 11
low process_spawn library 9
low build_script build_script 1
low foreign_functions library 1
info url_literal test 46
info url_literal library 28
info unsafe_code library 6
info unsafe_code test 6

Run: check

failed
Ended
agent reported the end
Guest
exit code 101
Run time
7 min 36 s
VM restore
172 ms
Payload
14379 files, 243.5 MiB
Files opened
344915

Processes 2000

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 20 ms 7 min 36 s 25856
└rustc /usr/local/bin/rustc ×10 --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow 698 ms 803 ms 0
└toolchain /usr/bin/cc -m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcIVgTFt/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib 1.3 s 165 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccWidSzR.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcIVgTFt/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L 1.3 s 157 ms 0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccWidSzR.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcIVgTFt/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 1.3 s 153 ms 0
└build_script proc-macro2 1.5 s 87 ms 0
└rustc /usr/local/bin/rustc ×3 --version 1.5 s 7 ms 0
└rustc /usr/local/bin/rustc --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu 1.5 s 34 ms 256
└rustc /usr/local/bin/rustc ×28 --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow 1.7 s 53 ms 0
└build_script quote 3.0 s 23 ms 0
└rustc /usr/local/bin/rustc --version 3.0 s 21 ms 0
└build_script libc 3.6 s 10 ms 0
└rustc /usr/local/bin/rustc --version 3.6 s 7 ms 0
└build_script openssl-sys 31.1 s 5 min 22 s 0
└toolchain /usr/bin/cc -E /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/8561741043071217275detect_compiler_family.c 31.5 s 23 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/8561741043071217275detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 8561741043071217275detect_compiler_family.c -dumpbase-ext .c 31.5 s 20 ms 0
└toolchain /usr/bin/cc -? 31.5 s 3 ms 256
└toolchain /usr/bin/cc -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/flag_check -c /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/flag_check.c 31.5 s 31 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/flag_check.c -quiet -dumpdir /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccqWAzM1.s 31.5 s 23 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/flag_check /tmp/ccqWAzM1.s 31.5 s 6 ms 0
└other /usr/bin/perl ./Configure --prefix=/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install --openssldir=/usr/local/ssl no-shared no-module no-tests no-comp no-zlib no-zlib-dynamic --libdir=lib no-ssl3 no-md2 no-rc5 no-weak-ssl-ciphers no-camellia no-idea no-seed linux-x86_64 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -w 31.5 s 11.8 s 0
└toolchain /usr/bin/cc -dM -E -x c /dev/null 31.7 s 9 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /dev/null -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dM -dumpbase null 31.7 s 7 ms 0
└toolchain /usr/bin/g++ -dM -E -x c /dev/null 31.7 s 10 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /dev/null -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dM -dumpbase null 31.7 s 6 ms 0
└toolchain /usr/bin/cc -Wa,--help -c -o null.1014.o -x assembler /dev/null 31.7 s 2 ms 512
└toolchain /usr/bin/as --64 --help -o null.1014.o /dev/null 31.7 s 1 ms 13
└other /usr/bin/perl configdata.pm 41.1 s 2.2 s 0
└other /usr/bin/make depend 43.4 s 150 ms 0
└other /bin/sh ×2 -c : 43.5 s 1 ms 0
└other /bin/sh -c /usr/bin/perl ./util/add-depends.pl "gcc" 43.5 s 102 ms 0
└other /usr/bin/perl ./util/add-depends.pl gcc 43.5 s 101 ms 0
└other /usr/bin/make build_libs 43.6 s 5 min 6 s 0
└other /bin/sh ×110 -c /usr/bin/perl util/mkinstallvars.pl COMMENT="This file should be used when building against this OpenSSL build, and should never be installed" PREFIX=. BINDIR=apps APPLINKDIR=ms LIBDIR= INCLUDEDIR=include "INCLUDEDIR=./include" ENGINESDIR=engines MODULESDIR=providers "VERSION=3.6.3" "LDLIBS=-ldl -pthread " > builddata.pm 43.6 s 21 ms 0
└other /usr/bin/perl util/mkinstallvars.pl COMMENT=This file should be used when building against this OpenSSL build, and should never be installed PREFIX=. BINDIR=apps APPLINKDIR=ms LIBDIR= INCLUDEDIR=include INCLUDEDIR=./include ENGINESDIR=engines MODULESDIR=providers VERSION=3.6.3 LDLIBS=-ldl -pthread 43.6 s 21 ms 0
└other /bin/sh -c "make" depend && "make" _build_libs 1 min 2 s 4 min 47 s 0
└other /usr/bin/make depend 1 min 2 s 438 ms 0
└other /bin/sh ×2 -c : 1 min 2 s 1 ms 0
└other /bin/sh -c /usr/bin/perl ./util/add-depends.pl "gcc" 1 min 2 s 348 ms 0
└other /usr/bin/perl ./util/add-depends.pl gcc 1 min 2 s 346 ms 0
└other /usr/bin/make _build_libs 1 min 2 s 4 min 47 s 0
└other /bin/sh ×190 -c cc -I. -Iinclude -Iapps/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3\"" -DMODULESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules\"" -D… 1 min 2 s 154 ms 0
└toolchain /usr/bin/cc -I. -Iinclude -Iapps/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="/usr/local/ssl" -DENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -DMODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -MMD -MF apps/lib/libapps-lib-app_libctx.d.tmp -c -o 1 min 2 s 144 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -I . -I include -I apps/include -imultiarch x86_64-linux-gnu -MMD apps/lib/libapps-lib-app_libctx.d -MF apps/lib/libapps-lib-app_libctx.d.tmp -MQ apps/lib/libapps-lib-app_libctx.o -D_REENTRANT -D OPENSSL_USE_NODELETE -D L_ENDIAN -D OPENSSL_PIC -D OPENSSLDIR="/usr/local/ssl" -D ENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -D MODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -D OPENSSL_BUILDING_OPENSSL -D 1 min 2 s 138 ms 0
└toolchain /usr/bin/as -I . -I include -I apps/include --gdwarf-4 --64 --noexecstack -o apps/lib/libapps-lib-app_libctx.o /tmp/cca14ap3.s 1 min 2 s 3 ms 0
└other /usr/bin/touch ×189 apps/lib/libapps-lib-app_libctx.d.tmp 1 min 2 s 1 ms 0
└other /bin/sh ×189 -c if cmp apps/lib/libapps-lib-app_libctx.d.tmp apps/lib/libapps-lib-app_libctx.d > /dev/null 2> /dev/null; then \\u{a}\u{9}rm -f apps/lib/libapps-lib-app_libctx.d.tmp; \\u{a}else \\u{a}\u{9}mv apps/lib/libapps-lib-app_libctx.d.tmp apps/lib/libapps-lib-app_libctx.d; \\u{a}fi 1 min 2 s 5 ms 0
└other /usr/bin/cmp apps/lib/libapps-lib-app_libctx.d.tmp apps/lib/libapps-lib-app_libctx.d 1 min 2 s 1 ms 512
└other /usr/bin/mv apps/lib/libapps-lib-app_libctx.d.tmp apps/lib/libapps-lib-app_libctx.d 1 min 2 s 3 ms 0
└other /bin/sh ×13 -c CC="cc" /usr/bin/perl crypto/aes/asm/aes-cfb-avx512.pl "elf" -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3\"" -DMODULESDIR="… 1 min 10 s 71 ms 0
└other /usr/bin/perl crypto/aes/asm/aes-cfb-avx512.pl elf -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="/usr/local/ssl" -DENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -DMODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -DAES_ASM -DBSAES_ASM 1 min 10 s 70 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 1 min 10 s 7 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 1 min 10 s 5 ms 0
└other /bin/sh -c "/usr/bin/perl" "crypto/aes/asm/../../perlasm/x86_64-xlate.pl" elf "crypto/aes/aes-cfb-avx512.s" 1 min 10 s 56 ms 0
└other /usr/bin/perl crypto/aes/asm/../../perlasm/x86_64-xlate.pl elf crypto/aes/aes-cfb-avx512.s 1 min 10 s 55 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 1 min 10 s 3 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 1 min 10 s 2 ms 0
└other /bin/sh ×5 -c CC="cc" /usr/bin/perl crypto/aes/asm/aes-x86_64.pl "elf" -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3\"" -DMODULESDIR="\"/w… 1 min 10 s 89 ms 0
└other /usr/bin/perl crypto/aes/asm/aes-x86_64.pl elf -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="/usr/local/ssl" -DENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -DMODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -DAES_ASM -DBSAES_ASM 1 min 10 s 88 ms 0
└other /bin/sh -c "/usr/bin/perl" "crypto/aes/asm/../../perlasm/x86_64-xlate.pl" elf "crypto/aes/aes-x86_64.s" 1 min 10 s 69 ms 0
└other /usr/bin/perl crypto/aes/asm/../../perlasm/x86_64-xlate.pl elf crypto/aes/aes-x86_64.s 1 min 10 s 61 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 1 min 10 s 3 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 1 min 10 s 1 ms 0
└other /bin/sh ×3 -c CC="cc" /usr/bin/perl crypto/bn/asm/rsaz-x86_64.pl "elf" -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="\"/usr/local/ssl\"" -DENGINESDIR="\"/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3\"" -DMODULESDIR="\"/w… 1 min 35 s 76 ms 0
└other /usr/bin/perl crypto/bn/asm/rsaz-x86_64.pl elf -I. -Iinclude -Iproviders/common/include -Iproviders/implementations/include -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -O2 -ffunction-sections -fdata-sections -fPIC -g -gdwarf-4 -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -m64 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSLDIR="/usr/local/ssl" -DENGINESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/engines-3" -DMODULESDIR="/work/target/debug/build/openssl-sys-bccb845dde1f66a6/out/openssl-build/install/lib/ossl-modules" -DOPENSSL_BUILDING_OPENSSL -DNDEBUG -DAES_ASM -DBSAES_ASM 1 min 35 s 75 ms 0
└other /bin/sh -c "/usr/bin/perl" "crypto/bn/asm/../../perlasm/x86_64-xlate.pl" elf "crypto/bn/rsaz-x86_64.s" 1 min 35 s 72 ms 0
└other /usr/bin/perl crypto/bn/asm/../../perlasm/x86_64-xlate.pl elf crypto/bn/rsaz-x86_64.s 1 min 35 s 70 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 1 min 35 s 3 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 1 min 35 s 1 ms 0
└toolchain /usr/bin/cc -Wa,-v -c -o /dev/null -x assembler /dev/null 1 min 35 s 7 ms 0
└toolchain /usr/bin/as --64 -v -o /dev/null /dev/null 1 min 35 s 2 ms 0

23567 more processes not listed

Network 2

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

DestinationProtocolWhat was sentBytes
:443tlsSNI github.com, inside TLS: GET /github/copilot-cli/releases/download/v1.0.99-3/github-copilot-1.0.99-3-linux-x64.tgz, host github.com, agent ureq/3.4.21.5 KiB
Sockets in the trace 3
WhenProgramHowAddressType
7 min 36 sconnectunix:/var/run/nscd/socketstream
7 min 36 sconnect:53datagram
7 min 36 sconnect:443stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
1718
Directories
358
Size
654.5 MiB
Compiled units
257
Scan
stopped at a limit

Nothing outside the build areas.

Output

Standard error
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.27
   Compiling libc v0.2.190
   Compiling syn v3.0.9
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling cc v1.8.0
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
   Compiling synstructure v0.14.0
   Compiling syn v2.0.119
   Compiling zerofrom-derive v0.1.8
    Checking bytes v1.12.1
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
    Checking futures-core v0.3.34
    Checking errno v0.3.14
   Compiling zerovec-derive v0.11.6
    Checking zerovec v0.11.8
    Checking signal-hook-registry v1.4.8
   Compiling openssl-macros v0.1.1
   Compiling openssl-src v300.6.1+3.6.3
    Checking mio v1.2.4
    Checking socket2 v0.6.5
   Compiling displaydoc v0.2.7
   Compiling tokio-macros v2.7.2
    Checking tokio v1.53.3
   Compiling openssl-sys v0.9.117
   Compiling cfg-if v1.0.5
    Checking bitflags v2.13.2
    Checking futures-sink v0.3.34
    Checking smallvec v1.16.3
    Checking http v1.5.0
   Compiling serde_core v1.0.229
    Checking tinystr v0.8.4
    Checking slab v0.4.12
   Compiling rustix v1.1.5
    Checking litemap v0.8.3
    Checking writeable v0.6.4
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
    Checking icu_locale_core v2.3.0
    Checking zerotrie v0.2.5
    Checking potential_utf v0.1.6
   Compiling openssl v0.10.81
   Compiling icu_normalizer_data v2.3.0
    Checking utf8_iter v1.0.4
    Checking foreign-types-shared v0.1.1
   Compiling httparse v1.10.1
   Compiling icu_properties_data v2.3.0
    Checking foreign-types v0.3.2
    Checking icu_collections v2.3.0
    Checking icu_provider v2.3.1
   Compiling futures-macro v0.3.34
   Compiling typenum v1.20.1
    Checking once_cell v1.21.4
    Checking equivalent v1.0.3
   Compiling native-tls v0.2.18
    Checking futures-task v0.3.34
    Checking hashbrown v0.17.1
   Compiling zmij v1.0.23
    Checking indexmap v2.14.2
    Checking futures-util v0.3.34
    Checking hybrid-array v0.4.15
    Checking tracing-core v0.1.36
    Checking http-body v1.1.0
    Checking tokio-util v0.7.20
   Compiling tracing-attributes v0.1.31
    Checking percent-encoding v2.3.2
    Checking rand_core v0.10.1
   Compiling itoa v1.0.18
   Compiling crc32fast v1.5.2
   Compiling getrandom v0.4.3
    Checking openssl-probe v0.2.1
   Compiling zeroize v1.9.1
    Checking tracing v0.1.44
    Checking icu_properties v2.3.0
    Checking icu_normalizer v2.3.0
   Compiling log v0.4.34
    Checking try-lock v0.2.5
    Checking cpufeatures v0.3.1
   Compiling simd-adler32 v0.3.10
   Compiling linux-raw-sys v0.12.1
   Compiling adler2 v2.0.1
    Checking tower-service v0.3.3
    Checking atomic-waker v1.1.2
   Compiling base64ct v1.8.3
    Checking fnv v1.0.7
    Checking h2 v0.4.20
   Compiling pem-rfc7468 v1.0.0
   Compiling miniz_oxide v0.9.1
    Checking want v0.3.2
    Checking idna_adapter v1.2.2
   Compiling rustls-pki-types v1.15.1
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
    Checking block-buffer v0.12.1
    Checking crypto-common v0.2.2
    Checking futures-channel v0.3.34
   Compiling memchr v2.8.3
   Compiling base64 v0.23.1
    Checking const-oid v0.10.2
   Compiling option-ext v0.2.0
   Compiling serde_json v1.0.154
   Compiling thiserror v2.0.21
   Compiling dirs-sys v0.5.0
    Checking digest v0.11.3
   Compiling ureq-proto v0.6.4
    Checking hyper v1.12.0
   Compiling digest v0.10.7
   Compiling webpki-root-certs v1.0.9
   Compiling flate2 v1.1.10
    Checking idna v1.1.0
   Compiling xattr v1.6.1
   Compiling der v0.8.2
    Checking chacha20 v0.10.2
    Checking tokio-native-tls v0.3.1
    Checking form_urlencoded v1.2.2
   Compiling filetime v0.2.29
    Checking sync_wrapper v1.0.2
   Compiling thiserror-impl v2.0.21
   Compiling cpufeatures v0.2.17
   Compiling utf8-zero v0.8.1
    Checking tower-layer v0.3.3
   Compiling parking_lot_core v0.9.12
   Compiling typed-path v0.12.3
    Checking ipnet v2.12.2
    Checking hyper-util v0.1.21
   Compiling zip v9.0.4
   Compiling ureq v3.4.2
    Checking tower v0.5.3
   Compiling sha2 v0.10.9
   Compiling tar v0.4.46
    Checking url v2.5.8
    Checking rand v0.10.3
    Checking sha1 v0.11.0
   Compiling dirs v7.0.0
    Checking aho-corasick v1.1.5
    Checking http-body-util v0.1.5
    Checking data-encoding v2.11.1
   Compiling serde v1.0.229
    Checking scopeguard v1.2.0
    Checking regex-syntax v0.8.11
    Checking regex-automata v0.4.18
    Checking lock_api v0.4.14
    Checking tungstenite v0.30.0
    Checking hyper-tls v0.6.0
   Compiling github-copilot-sdk v1.0.23-preview.3
    Checking tower-http v0.6.11
   Compiling serde_derive v1.0.229
    Checking foldhash v0.2.0
    Checking parking_lot v0.12.5
    Checking reqwest v0.13.5
warning: github-copilot-sdk@1.0.23-preview.3: Downloading https://github.com/github/copilot-cli/releases/download/v1.0.99-3/github-copilot-1.0.99-3-linux-x64.tgz
error: failed to run custom build command for `github-copilot-sdk v1.0.23-preview.3`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/github-copilot-sdk-2b624e592ba74496/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=COPILOT_SKIP_CLI_DOWNLOAD
  cargo:rerun-if-env-changed=COPILOT_CLI_EXTRACT_DIR
  cargo:rerun-if-env-changed=BUNDLED_CLI_CACHE_DIR
  cargo::rustc-check-cfg=cfg(has_bundled_cli)
  cargo::rustc-check-cfg=cfg(has_extracted_cli)
  cargo:rerun-if-changed=cli-version.txt
  cargo:rerun-if-changed=cli-version-in-process.txt
  cargo:rustc-env=COPILOT_SDK_CLI_VERSION=1.0.99-3
  cargo:rustc-env=COPILOT_SDK_CLI_CACHE_ID=1.0.99-3
  cargo:warning=Downloading https://github.com/github/copilot-cli/releases/download/v1.0.99-3/github-copilot-1.0.99-3-linux-x64.tgz

  --- stderr

  thread 'main' (12949) panicked at /cw/vendor/github-copilot-sdk-1.0.23-preview.3/build/in_process.rs:1004:25:
  Failed to download https://github.com/github/copilot-cli/releases/download/v1.0.99-3/github-copilot-1.0.99-3-linux-x64.tgz: HTTP 404 Not Found
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

6
WhenFromToEventWorker
2026-10-16 15:22 UTCDiscoveredFetchedfetchedfetcher-286769
2026-10-16 15:22 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-286807
2026-10-16 15:24 UTCReadyForSandboxRunningsandbox_startedorchestrator-289279-slot2
2026-10-16 15:32 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-289279-slot2
2026-10-16 15:32 UTCDynamicallyAnalyzedScoredscoredanalyzer-289309
2026-10-16 15:32 UTCScoredDonefinalizedanalyzer-289309