Crateward

katana-render-runtime 0.4.21

Done dynamic on Linux job 21517 crates.io SBOM Findings (VEX)

high severity included_binary in build_script code (8 places): src/markdown/generated/zenuml-runtime-assets.bin.br (840248 bytes)

48
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
30static:included_binary
static · katana-render-runtime
build.rs:3high severity included_binary in build_script code (8 places): src/markdown/generated/zenuml-runtime-assets.bin.br (840248 bytes)
10network_lookup
network · v8
github.comThe build looked up github.com.
5exec_downloader
trace · v8
/usr/bin/curlThe build ran /usr/bin/curl.
3exec_interpreter
trace · v8
/usr/bin/python3The build ran /usr/bin/python3.
2 without points
SignalWhereWhat
static:build_script
static · katana-render-runtime
build.rslow severity build_script in build_script code: build.rs
static:yara:invisible_characters
static · katana-render-runtime
src/markdown/diagram_runtime/generated/drawio-runtime.min.js:4medium severity yara:invisible_characters in library code (3 places): Zero width or invisible characters, which can hide identifiers or payloads

Behavior

Profile

exec:downloader exec:interpreter net:github.com static:included_binary static:yara:invisible_characters

Static findings

8 groups
high included_binary build_script 1
  • src/markdown/generated/zenuml-runtime-assets.bin.br (840248 bytes) build.rs:3
medium included_binary library 7
medium yara_match invisible_characters library 3
low network_access library 14
low process_spawn library 8
low build_script build_script 1
info url_literal library 214
info unsafe_code library 3

Run: check

failed
Ended
agent reported the end
Guest
exit code 101
Run time
1 min 49 s
VM restore
79 ms
Payload
29696 files, 510.3 MiB
Files opened
19127

Processes 295

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 5 ms 1 min 49 s 25856
└rustc /usr/local/bin/rustc ×27 --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --cfg feature="span-locations" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=c83ce984471a4e48 -C extra-filename=-5cb179a647ef6e51 --out-dir /work/target/debug/build/proc-macro2-5cb179a647ef6e51 -L dependency=/work/target/debug/deps --cap-lints allow 396 ms 727 ms 0
└toolchain /usr/bin/cc -m64 /work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustctDK5nM/symbols.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.build_script_build.dfb9ac565abdb04-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.7zrad1clk47dffwz5ub8n8yx5.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libr 966 ms 154 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc0u8jKs.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustctDK5nM/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L 973 ms 147 ms 0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc0u8jKs.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustctDK5nM/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 975 ms 143 ms 0
└build_script proc-macro2 1.1 s 93 ms 0
└rustc /usr/local/bin/rustc ×3 --version 1.1 s 7 ms 0
└rustc /usr/local/bin/rustc --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-97392f29eb377993/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu 1.1 s 41 ms 256
└rustc /usr/local/bin/rustc ×151 --crate-name proc_macro2 --edition=2021 /cw/vendor/proc-macro2-1.0.107/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --cfg feature="span-locations" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=5d63f7a10747f6e2 -C extra-filename=-e838b6f4c830537c --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --extern unicode_ident=/work/target/debug/deps/libunicode_ident-76fddff3086055f2.rmeta 1.2 s 622 ms 0
└build_script libc 18.8 s 9 ms 0
└rustc /usr/local/bin/rustc --version 18.8 s 7 ms 0
└unknown 18.9 s 0 ms 32512
└build_script icu_locale_fallback_data 19.4 s 1 ms 0
└build_script serde_core 19.4 s 10 ms 0
└rustc /usr/local/bin/rustc --version 19.4 s 7 ms 0
└build_script prettyplease 19.4 s 1 ms 0
└build_script clang-sys 19.8 s 1 ms 0
└build_script rustix 23.7 s 21 ms 0
└rustc /usr/local/bin/rustc --crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o - - 23.7 s 17 ms 256
└build_script serde 25.0 s 10 ms 0
└rustc /usr/local/bin/rustc --version 25.0 s 7 ms 0
└build_script icu_calendar_data 25.0 s 1 ms 0
└build_script slotmap 27.2 s 25 ms 0
└rustc /usr/local/bin/rustc ×3 --verbose --version 27.2 s 7 ms 0
└build_script bindgen 32.3 s 1 ms 0
└build_script web_atoms 40.7 s 165 ms 0
└unknown ×3 40.9 s 0 ms 32512
└build_script paste 57.3 s 9 ms 0
└rustc /usr/local/bin/rustc --version 57.3 s 7 ms 0
└build_script jni-macros 58.6 s 10 ms 0
└rustc /usr/local/bin/rustc -vV 58.6 s 8 ms 0
└build_script jni 1 min 12 s 1 ms 0
└build_script v8 1 min 14 s 35.1 s 25856
└other /usr/bin/python3 ./tools/download_file.py --url https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz --filename /work/target/debug/gn_out/obj/librusty_v8.tmp 1 min 14 s 35.1 s 256
└other /usr/bin/curl -L -f -s -o /work/target/debug/gn_out/obj/librusty_v8.tmp https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz 1 min 49 s 41 ms 5632

Network 6

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

DestinationProtocolWhat was sentBytes
:443tlsSNI github.com1.5 KiB
:443tlsSNI github.com1.5 KiB
:443tlsSNI github.com1.5 KiB
:443tlsSNI github.com1.5 KiB
:443tlsSNI github.com, inside TLS: GET /denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz, host github.com, agent curl/8.14.11.5 KiB
Sockets in the trace 6
WhenProgramHowAddressType
1 min 14 s/usr/bin/python3connectunix:/var/run/nscd/socketstream
1 min 14 s/usr/bin/python3connect:53datagram
1 min 14 s/usr/bin/python3connect:443stream
1 min 49 s/usr/bin/curlconnectunix:/var/run/nscd/socketstream
1 min 49 s/usr/bin/curlconnect:53datagram
1 min 49 s/usr/bin/curlconnect:443stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
1278
Directories
316
Size
641.6 MiB
Compiled units
213
Scan
stopped at a limit

Nothing outside the build areas.

Output

Standard error
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling syn v3.0.6
   Compiling synstructure v0.14.0
   Compiling zerofrom-derive v0.1.8
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.3
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
   Compiling zerovec-derive v0.11.6
    Checking zerovec v0.11.8
   Compiling displaydoc v0.2.7
   Compiling syn v2.0.119
    Checking writeable v0.6.4
    Checking potential_utf v0.1.6
    Checking tinystr v0.8.4
    Checking litemap v0.8.3
    Checking icu_locale_core v2.3.0
    Checking log v0.4.34
   Compiling siphasher v1.0.4
   Compiling phf_shared v0.14.0
    Checking zerotrie v0.2.5
   Compiling fastrand v2.5.0
   Compiling phf_generator v0.14.0
   Compiling bytemuck_derive v1.12.1
    Checking bytemuck v1.25.2
    Checking icu_provider v2.3.1
   Compiling serde_derive v1.0.229
    Checking core_maths v0.1.1
   Compiling glob v0.3.4
   Compiling cfg-if v1.0.5
    Checking simd-adler32 v0.3.10
   Compiling libc v0.2.189
   Compiling clang-sys v1.9.1
   Compiling prettyplease v0.2.37
   Compiling serde_core v1.0.229
   Compiling icu_locale_fallback_data v2.3.0
   Compiling slotmap v1.1.1
    Checking serde v1.0.229
    Checking calendrical_calculations v0.2.4
   Compiling phf_macros v0.14.0
   Compiling phf_codegen v0.14.0
   Compiling string_cache_codegen v0.11.2
    Checking new_debug_unreachable v1.0.6
   Compiling regex-syntax v0.8.11
   Compiling minimal-lexical v0.2.1
   Compiling either v1.18.0
   Compiling bitflags v2.13.2
   Compiling icu_calendar_data v2.3.0
   Compiling rustix v0.38.44
   Compiling nom v7.1.3
    Checking icu_collections v2.3.0
   Compiling regex-automata v0.4.18
   Compiling web_atoms v0.3.0
    Checking phf v0.14.0
    Checking miniz_oxide v0.9.1
   Compiling libloading v0.8.9
    Checking resb v0.1.2
    Checking font-types v0.12.5
    Checking typenum v1.20.1
    Checking precomputed-hash v0.1.1
   Compiling bindgen v0.72.1
    Checking float-cmp v0.9.0
   Compiling linux-raw-sys v0.4.15
    Checking strict-num v0.1.1
    Checking string_cache v0.11.0
    Checking hybrid-array v0.4.15
    Checking flate2 v1.1.10
    Checking read-fonts v0.41.0
    Checking zoneinfo64 v0.3.0
    Checking icu_locale_fallback v2.3.0
   Compiling regex v1.13.1
   Compiling cexpr v0.6.0
   Compiling itertools v0.13.0
    Checking polycool v0.4.0
   Compiling crc32fast v1.5.2
   Compiling strck v1.0.0
   Compiling home v0.5.12
    Checking dtoa v1.0.11
   Compiling smallvec v1.16.2
    Checking arrayref v0.3.9
    Checking roxmltree v0.20.0
   Compiling same-file v1.0.6
   Compiling rustc-hash v2.1.3
   Compiling alloc-no-stdlib v3.0.0
   Compiling shlex v1.3.0
   Compiling adler2 v2.0.1
   Compiling miniz_oxide v0.8.9
   Compiling alloc-stdlib v0.3.0
   Compiling walkdir v2.5.0
    Checking fontconfig-parser v0.5.8
    Checking tiny-skia-path v0.12.0
   Compiling diplomat_core v0.16.1
    Checking dtoa-short v0.3.5
   Compiling which v6.0.3
   Compiling gzip-header v1.1.0
    Checking kurbo v0.13.1
    Checking icu_calendar v2.3.0
    Checking icu_normalizer v2.3.0
    Checking icu_properties v2.3.0
    Checking timezone_provider v0.2.6
   Compiling jni-macros v0.22.4
    Checking tendril v0.5.1
   Compiling fslock v0.2.1
    Checking fdeflate v0.3.7
    Checking memmap2 v0.9.11
   Compiling simdutf8 v0.1.5
   Compiling paste v1.0.15
    Checking ixdtf v0.6.6
    Checking tinyvec v1.13.3
    Checking unicode-script v0.5.8
    Checking fontdb v0.24.0
    Checking temporal_rs v0.2.6
   Compiling simd_cesu8 v1.2.0
    Checking png v0.18.1
   Compiling v8 v152.2.0
    Checking markup5ever v0.40.0
    Checking idna_adapter v1.2.2
    Checking svgtypes v0.16.1
   Compiling diplomat v0.16.1
   Compiling jni v0.22.4
   Compiling brotli-decompressor v6.0.1
    Checking harfrust v0.12.0
    Checking skrifa v0.44.0
    Checking crypto-common v0.2.2
    Checking block-buffer v0.12.1
    Checking roxmltree v0.21.1
    Checking simplecss v0.2.2
   Compiling jni-sys-macros v0.4.1
   Compiling thiserror-impl v2.0.21
    Checking unicode-bidi v0.3.18
    Checking zune-core v0.5.3
    Checking data-url v0.3.2
    Checking unicode-vo v0.1.0
    Checking quick-error v2.0.1
    Checking byteorder-lite v0.1.0
    Checking weezl v0.1.12
    Checking diplomat-runtime v0.16.0
    Checking color_quant v1.1.0
    Checking xmlwriter v0.1.0
    Checking pico-args v0.5.0
    Checking const-oid v0.10.2
    Checking imagesize v0.15.0
    Checking rustls v0.23.45
    Checking usvg v0.48.1
    Checking digest v0.11.3
    Checking java-locator v0.1.9
    Checking gif v0.14.2
    Checking temporal_capi v0.2.6
    Checking image-webp v0.2.4
    Checking zune-jpeg v0.5.15
    Checking thiserror v2.0.21
    Checking jni-sys v0.4.1
    Checking ureq-proto v0.6.4
   Compiling katana-render-runtime v0.4.21
    Checking idna v1.1.0
error: failed to run custom build command for `v8 v152.2.0`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/v8-8edb486d8d9ab5f7/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-changed=.gn
  cargo:rerun-if-changed=BUILD.gn
  cargo:rerun-if-changed=src/binding.cc
  cargo:rerun-if-env-changed=CCACHE
  cargo:rerun-if-env-changed=CLANG_BASE_PATH
  cargo:rerun-if-env-changed=CXXSTDLIB
  cargo:rerun-if-env-changed=DENO_TRYBUILD
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=GN
  cargo:rerun-if-env-changed=GN_ARGS
  cargo:rerun-if-env-changed=HOST
  cargo:rerun-if-env-changed=LIBCLANG_PATH
  cargo:rerun-if-env-changed=NINJA
  cargo:rerun-if-env-changed=OUT_DIR
  cargo:rerun-if-env-changed=RUSTY_V8_ARCHIVE
  cargo:rerun-if-env-changed=RUSTY_V8_ARCHIVE_SHA256
  cargo:rerun-if-env-changed=RUSTY_V8_BINDGEN_RESOURCE_DIR
  cargo:rerun-if-env-changed=RUSTY_V8_GLIBC_PREFIX
  cargo:rerun-if-env-changed=RUSTY_V8_MIRROR
  cargo:rerun-if-env-changed=RUSTY_V8_MIRROR_TAG
  cargo:rerun-if-env-changed=RUSTY_V8_MIRROR_FALLBACK
  cargo:rerun-if-env-changed=RUSTY_V8_MUSL_SYSROOT
  cargo:rerun-if-env-changed=RUSTY_V8_SKIP_DOWNLOAD
  cargo:rerun-if-env-changed=RUSTY_V8_SRC_BINDING_PATH
  cargo:rerun-if-env-changed=RUSTY_V8_SRC_BINDING_URL
  cargo:rerun-if-env-changed=SCCACHE
  cargo:rerun-if-env-changed=V8_FORCE_DEBUG
  cargo:rerun-if-env-changed=V8_FROM_SOURCE
  cargo:rerun-if-env-changed=PYTHON
  cargo:rerun-if-env-changed=DISABLE_CLANG
  cargo:rerun-if-env-changed=EXTRA_GN_ARGS
  cargo:rerun-if-env-changed=PRINT_GN_ARGS
  cargo:rerun-if-env-changed=CARGO_ENCODED_RUSTFLAGS
  cargo:rustc-link-lib=static=rusty_v8
  lockfile: "/work/target/debug/build/v8.fslock"
  cargo:rustc-env=RUSTY_V8_SRC_BINDING_PATH=/cw/vendor/v8-152.2.0/gen/src_binding_release_x86_64-unknown-linux-gnu.rs
  cargo:rustc-link-search=/work/target/debug/gn_out/obj
  static lib URLs: ["https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz"]
  Trying to fetch from https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
  Looking for download in '"/work/home/.cargo/.rusty_v8/v152_2_0_librusty_v8_release_x86_64_unknown_linux_gnu_a_gz"'
  Looking for download in '"/work/home/.cargo/.rusty_v8/https___github_com_denoland_rusty_v8_releases_download_v152_2_0_librusty_v8_release_x86_64_unknown_linux_gnu_a_gz"'
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
  Trying with Python...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 5 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 10 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 20 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Python downloader failed, trying with curl.
  Failed to fetch from https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz: no downloader (deno, python, curl) could fetch the URL

  --- stderr
  Traceback (most recent call last):
    File "/usr/lib/python3.13/urllib/request.py", line 1319, in do_open
      h.request(req.get_method(), req.selector, req.data, headers,
      ~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                encode_chunked=req.has_header('Transfer-encoding'))
                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1367, in request
      self._send_request(method, url, body, headers, encode_chunked)
      ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1413, in _send_request
      self.endheaders(body, encode_chunked=encode_chunked)
      ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1362, in endheaders
      self._send_output(message_body, encode_chunked=encode_chunked)
      ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1122, in _send_output
      self.send(msg)
      ~~~~~~~~~^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1066, in send
      self.connect()
      ~~~~~~~~~~~~^^
    File "/usr/lib/python3.13/http/client.py", line 1508, in connect
      self.sock = self._context.wrap_socket(self.sock,
                  ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^
                                            server_hostname=server_hostname)
                                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/ssl.py", line 455, in wrap_socket
      return self.sslsocket_class._create(
             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
          sock=sock,
          ^^^^^^^^^^
      ...<5 lines>...
          session=session
          ^^^^^^^^^^^^^^^
      )
      ^
    File "/usr/lib/python3.13/ssl.py", line 1076, in _create
      self.do_handshake()
      ~~~~~~~~~~~~~~~~~^^
    File "/usr/lib/python3.13/ssl.py", line 1372, in do_handshake
      self._sslobj.do_handshake()
      ~~~~~~~~~~~~~~~~~~~~~~~~~^^
  ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)

  During handling of the above exception, another exception occurred:

  Traceback (most recent call last):
    File "/cw/vendor/v8-152.2.0/./tools/download_file.py", line 63, in <module>
      sys.exit(main())
               ~~~~^^
    File "/cw/vendor/v8-152.2.0/./tools/download_file.py", line 58, in main
      DownloadUrl(args.url, f)
      ~~~~~~~~~~~^^^^^^^^^^^^^
    File "/cw/vendor/v8-152.2.0/./tools/download_file.py", line 44, in DownloadUrl
      raise e
    File "/cw/vendor/v8-152.2.0/./tools/download_file.py", line 28, in DownloadUrl
      response = urlopen(url)
    File "/usr/lib/python3.13/urllib/request.py", line 189, in urlopen
      return opener.open(url, data, timeout)
             ~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/urllib/request.py", line 489, in open
      response = self._open(req, data)
    File "/usr/lib/python3.13/urllib/request.py", line 506, in _open
      result = self._call_chain(self.handle_open, protocol, protocol +
                                '_open', req)
    File "/usr/lib/python3.13/urllib/request.py", line 466, in _call_chain
      result = func(*args)
    File "/usr/lib/python3.13/urllib/request.py", line 1367, in https_open
      return self.do_open(http.client.HTTPSConnection, req,
             ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                          context=self._context)
                          ^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/urllib/request.py", line 1322, in do_open
      raise URLError(err)
  urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>

  thread 'main' (2112) panicked at /cw/vendor/v8-152.2.0/build.rs:1285:5:
  Failed to fetch the V8 prebuilt artifact /work/target/debug/gn_out/obj/librusty_v8.a. Tried:
  - https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz: no downloader (deno, python, curl) could fetch the URL
  If no prebuilt artifact is published for your target or version, compile V8 from source by setting V8_FROM_SOURCE=1. You can also point the build at an artifact via RUSTY_V8_ARCHIVE (static lib), a binding via RUSTY_V8_SRC_BINDING_URL or RUSTY_V8_SRC_BINDING_PATH (src binding only), a mirror via RUSTY_V8_MIRROR, or another release tag via RUSTY_V8_MIRROR_TAG.
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

6
WhenFromToEventWorker
2026-09-28 09:49 UTCDiscoveredFetchedfetchedfetcher-627152
2026-09-28 09:49 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-450252
2026-09-28 09:57 UTCReadyForSandboxRunningsandbox_startedorchestrator-639812-slot2
2026-09-28 09:59 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-639812-slot2
2026-09-28 09:59 UTCDynamicallyAnalyzedScoredscoredanalyzer-523934
2026-09-28 09:59 UTCScoredDonefinalizedanalyzer-523934