turbo-surf-v8 149.3.0

Done dynamic on Linux job 226387 crates.io SBOM Findings (VEX)

high severity environment_enumeration in build_script code: std::env::vars

medium

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
30	static:environment_enumeration static · turbo-surf-v8	build.rs:1143	high severity environment_enumeration in build_script code: std::env::vars
10	network_lookup network · turbo-surf-v8	github.com	The build looked up github.com.
5	exec_downloader trace · turbo-surf-v8	/usr/bin/curl	The build ran /usr/bin/curl.
3	exec_interpreter trace · turbo-surf-v8	/usr/bin/python3	The build ran /usr/bin/python3.

5 without points

Signal	Where	What
static:build_script static · turbo-surf-v8	build.rs	low severity build_script in build_script code: build.rs
static:downloader_pattern static · turbo-surf-v8	build.rs:429	high severity downloader_pattern in build_script code: https://dl.google.com/android/repository/android-ndk-r26c-linux.zip at build.rs:429 with std::process::Command::new at build.rs:155
static:process_spawn static · turbo-surf-v8	build.rs:155	medium severity process_spawn in build_script code (18 places): std::process::Command::new
static:url_literal static · turbo-surf-v8	build.rs:429	low severity url_literal in build_script code (17 places): https://dl.google.com/android/repository/android-ndk-r26c-linux.zip
static:yara:persistence_locations static · turbo-surf-v8	README.md:74	medium severity yara:persistence_locations in library code: Paths and keys used to persist on a developer machine

Behavior

Profile

exec:downloader exec:interpreter net:github.com static:downloader_pattern static:environment_enumeration static:process_spawn static:yara:persistence_locations

Static findings

high downloader_pattern build_script 1

https://dl.google.com/android/repository/android-ndk-r26c-linux.zip at build.rs:429 with std::process::Command::new at build.rs:155 build.rs:429

high environment_enumeration build_script 1

std::env::vars build.rs:1143

medium process_spawn build_script 18

std::process::Command::new build.rs:155 build.rs:196 build.rs:212 build.rs:426 build.rs:434 build.rs:472 build.rs:486 build.rs:502 build.rs:524 build.rs:547 build.rs:681 build.rs:706 build.rs:720 build.rs:933 build.rs:961 build.rs:1099 build.rs:1134
std::process::Command build.rs:1097

medium yara_match persistence_locations library 1

Paths and keys used to persist on a developer machine README.md:74

low foreign_functions library 340

extern block gen/src_binding_debug_aarch64-apple-darwin.rs:91 gen/src_binding_debug_aarch64-apple-darwin.rs:124 gen/src_binding_debug_aarch64-apple-darwin.rs:177 gen/src_binding_debug_aarch64-apple-darwin.rs:236 gen/src_binding_debug_aarch64-apple-darwin.rs:243 gen/src_binding_debug_aarch64-apple-darwin.rs:307 gen/src_binding_debug_aarch64-apple-darwin.rs:496 gen/src_binding_debug_aarch64-apple-darwin.rs:542 gen/src_binding_debug_aarch64-apple-darwin.rs:591 gen/src_binding_debug_aarch64-apple-darwin.rs:847 gen/src_binding_debug_aarch64-apple-darwin.rs:851 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:91 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:124 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:177 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:236 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:243 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:307 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:496 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:542 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:591 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:847 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:851 gen/src_binding_debug_x86_64-apple-darwin.rs:91 gen/src_binding_debug_x86_64-apple-darwin.rs:124 gen/src_binding_debug_x86_64-apple-darwin.rs:177 gen/src_binding_debug_x86_64-apple-darwin.rs:236 gen/src_binding_debug_x86_64-apple-darwin.rs:243 gen/src_binding_debug_x86_64-apple-darwin.rs:307 gen/src_binding_debug_x86_64-apple-darwin.rs:496 gen/src_binding_debug_x86_64-apple-darwin.rs:542 gen/src_binding_debug_x86_64-apple-darwin.rs:591 gen/src_binding_debug_x86_64-apple-darwin.rs:847 gen/src_binding_debug_x86_64-apple-darwin.rs:851 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:91 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:124 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:177 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:236 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:243 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:307 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:496 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:542 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:591 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:847 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:851 gen/src_binding_ptrcomp_debug_aarch64-apple-darwin.rs:91 gen/src_binding_ptrcomp_debug_aarch64-apple-darwin.rs:124 gen/src_binding_ptrcomp_debug_aarch64-apple-darwin.rs:177 gen/src_binding_ptrcomp_debug_aarch64-apple-darwin.rs:236 gen/src_binding_ptrcomp_debug_aarch64-apple-darwin.rs:243 gen/src_binding_ptrcomp_debug_aarch64-apple-darwin.rs:307 and 290 more

low url_literal build_script 3

https://dl.google.com/android/repository/android-ndk-r26c-linux.zip build.rs:429
https://chromium.googlesource.com build.rs:446
https://github.com/denoland/rusty_v8/releases/download build.rs:593

low build_script build_script 1

build.rs build.rs

info unsafe_code library 53

16 unsafe blocks, functions or impls src/V8.rs:61 src/scope/raw.rs:25
43 unsafe blocks, functions or impls src/array_buffer.rs:149
11 unsafe blocks, functions or impls src/array_buffer_view.rs:41
10 unsafe blocks, functions or impls src/bigint.rs:39
30 unsafe blocks, functions or impls src/context.rs:106
33 unsafe blocks, functions or impls src/cppgc.rs:89 src/exception.rs:96
52 unsafe blocks, functions or impls src/crdtp.rs:174
15 unsafe blocks, functions or impls src/data.rs:44
2 unsafe blocks, functions or impls src/date.rs:20 src/external.rs:25 src/external_references.rs:42 src/fixed_array.rs:18 src/json.rs:28 src/script_or_module.rs:25
4 unsafe blocks, functions or impls src/fast_api.rs:28 src/primitive_array.rs:39 src/symbol.rs:46 src/unbound_script.rs:33
64 unsafe blocks, functions or impls src/function.rs:196 src/object.rs:321
58 unsafe blocks, functions or impls src/handle.rs:129
3 unsafe blocks, functions or impls src/icu.rs:47 src/primitives.rs:20 src/private.rs:27 src/regexp.rs:46 src/unbound_module_script.rs:28
61 unsafe blocks, functions or impls src/inspector.rs:166 src/simdutf.rs:305
118 unsafe blocks, functions or impls src/isolate.rs:298
17 unsafe blocks, functions or impls src/isolate_create_params.rs:343
6 unsafe blocks, functions or impls src/microtask.rs:57
29 unsafe blocks, functions or impls src/module.rs:97
1 unsafe blocks, functions or impls src/name.rs:20 src/typed_array.rs:23
9 unsafe blocks, functions or impls src/number.rs:31 src/shared_array_buffer.rs:51
31 unsafe blocks, functions or impls src/platform.rs:91
14 unsafe blocks, functions or impls src/promise.rs:73
19 unsafe blocks, functions or impls src/property_descriptor.rs:82
5 unsafe blocks, functions or impls src/proxy.rs:27
132 unsafe blocks, functions or impls src/scope.rs:165
7 unsafe blocks, functions or impls src/script.rs:66
12 unsafe blocks, functions or impls src/script_compiler.rs:98 src/support.rs:68
13 unsafe blocks, functions or impls src/snapshot.rs:77
71 unsafe blocks, functions or impls src/string.rs:20
23 unsafe blocks, functions or impls src/template.rs:644
76 unsafe blocks, functions or impls src/value.rs:157
28 unsafe blocks, functions or impls src/value_deserializer.rs:35
47 unsafe blocks, functions or impls src/value_serializer.rs:41
42 unsafe blocks, functions or impls src/wasm.rs:55

info url_literal test 14

file://exception.js tests/test_api.rs:7075
{"method":"Runtime.exceptionThrown","params":{"timestamp":0,"exceptionDetails":{"exceptionId":1,"text":"test exception","lineNumber":0,"columnNumber":0,"scriptId":"1","url":"file://exception.js","exce… tests/test_api.rs:7098
https://example.com tests/test_api.rs:9284
\u{a} globalThis.result = null;\u{a} WebAssembly\u{a} .compileStreaming("https://example.com")\u{a} .then(result => globalThis.result = result);\u{a} tests/test_api.rs:9298
https://example2.com tests/test_api.rs:9318 tests/test_api.rs:9330
\u{a} globalThis.result = null;\u{a} WebAssembly\u{a} .compileStreaming("https://example.com")\u{a} .catch(result => globalThis.result = result);\u{a} tests/test_api.rs:9332
https://example.com/test.wasm tests/test_api.rs:9372
http://www.foo.com/foo.js tests/test_api.rs:9456 tests/test_api.rs:9508 tests/test_api.rs:9560 tests/test_api.rs:9612
http://override/foo.js.map tests/test_api.rs:9505
wasm://wasm/a1d4c596 tests/test_api.rs:10396

info unsafe_code test 10

105 unsafe blocks, functions or impls tests/test_api.rs:160
1 unsafe blocks, functions or impls tests/test_api_entropy_source.rs:42 tests/test_concurrent_isolate_creation_and_disposal.rs:30 tests/test_custom_platform.rs:110 tests/test_external_deserialize.rs:107 tests/test_single_threaded_default_platform.rs:20 tests/test_ui.rs:7
8 unsafe blocks, functions or impls tests/test_cppgc.rs:248
10 unsafe blocks, functions or impls tests/test_simdutf.rs:76
4 unsafe blocks, functions or impls tests/test_simple_external.rs:40

info unsafe_code binary 6

10 unsafe blocks, functions or impls benches/function.rs:32
4 unsafe blocks, functions or impls examples/cppgc-object.rs:9
8 unsafe blocks, functions or impls examples/cppgc.rs:16
1 unsafe blocks, functions or impls examples/hello_world.rs:65 examples/process.rs:306 examples/shell.rs:216

info unsafe_code build_script 1

4 unsafe blocks, functions or impls build.rs:114

Run: check

failed

Ended: agent reported the end
Guest: exit code 101
Run time: 1 min 23 s
VM restore: 74 ms
Payload: 8411 files, 250.7 MiB
Files opened: 11369

Processes 196

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 176 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	1 min 23 s	25856
└rustc /usr/local/bin/rustc ×69	--crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	207 ms	352 ms	0
└rustc /usr/local/bin/rustc ×23	--crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --cfg feature="span-locations" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=c83ce984471a4e48 -C extra-filename=-5cb179a647ef6e51 --out-dir /work/target/debug/build/proc-macro2-5cb179a647ef6e51 -L dependency=/work/target/debug/deps --cap-lints allow	563 ms	358 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustck70XZ8/symbols.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.build_script_build.dfb9ac565abdb04-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.7zrad1clk47dffwz5ub8n8yx5.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libr	768 ms	151 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccYCQog8.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustck70XZ8/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	775 ms	144 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccYCQog8.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustck70XZ8/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6	777 ms	141 ms	0
└build_script proc-macro2		925 ms	86 ms	0
└rustc /usr/local/bin/rustc ×3	--version	926 ms	7 ms	0
└rustc /usr/local/bin/rustc	--cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-97392f29eb377993/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu	934 ms	32 ms	256
└build_script quote		1.1 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	1.1 s	7 ms	0
└build_script serde_core		9.6 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	9.6 s	8 ms	0
└build_script libm		10.9 s	1 ms	0
└build_script libc		15.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	15.1 s	7 ms	0
└build_script prettyplease		16.9 s	1 ms	0
└build_script icu_locale_fallback_data		16.9 s	2 ms	0
└build_script serde		16.9 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	16.9 s	7 ms	0
└build_script clang-sys		17.9 s	1 ms	0
└build_script crc32fast		23.7 s	11 ms	0
└rustc /usr/local/bin/rustc	--version	23.7 s	9 ms	0
└build_script rustix		23.8 s	21 ms	0
└rustc /usr/local/bin/rustc	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o - -	23.8 s	18 ms	256
└build_script icu_calendar_data		23.8 s	1 ms	0
└build_script serde		23.8 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	23.8 s	8 ms	0
└build_script bindgen		29.8 s	1 ms	0
└build_script num-traits		35.7 s	46 ms	0
└rustc /usr/local/bin/rustc ×3	--version --verbose	35.7 s	8 ms	0
└build_script paste		47.1 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	47.1 s	7 ms	0
└build_script turbo-surf-v8		48.6 s	35.1 s	25856
└other /usr/bin/python3	./tools/download_file.py --url https://github.com/denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz --filename /work/target/debug/gn_out/obj/librusty_v8.tmp	48.6 s	35.1 s	256
└other /usr/bin/curl	-L -f -s -o /work/target/debug/gn_out/obj/librusty_v8.tmp https://github.com/denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz	1 min 23 s	40 ms	5632

Network 6

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI github.com	1.5 KiB
:443	tls	SNI github.com	1.5 KiB
:443	tls	SNI github.com	1.5 KiB
:443	tls	SNI github.com	1.5 KiB
:443	tls	SNI github.com, inside TLS: GET /denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz, host github.com, agent curl/8.14.1	1.5 KiB

Sockets in the trace 6

When	Program	How	Address	Type
48.7 s	/usr/bin/python3	connect	unix:/var/run/nscd/socket	stream
48.7 s	/usr/bin/python3	connect	:53	datagram
48.7 s	/usr/bin/python3	connect	:443	stream
1 min 23 s	/usr/bin/curl	connect	unix:/var/run/nscd/socket	stream
1 min 23 s	/usr/bin/curl	connect	:53	datagram
1 min 23 s	/usr/bin/curl	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 723
Directories: 182
Size: 399.5 MiB
Compiled units: 116
Scan: stopped at a limit

Nothing outside the build areas.

Output

Standard error

   Compiling unicode-ident v1.0.27
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling syn v3.0.9
   Compiling synstructure v0.14.0
   Compiling zerofrom-derive v0.1.8
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
   Compiling zerovec-derive v0.11.6
   Compiling serde_core v1.0.229
    Checking zerovec v0.11.8
   Compiling displaydoc v0.2.7
    Checking writeable v0.6.4
   Compiling libm v0.2.16
    Checking tinystr v0.8.4
   Compiling serde_derive v1.0.229
    Checking litemap v0.8.3
    Checking icu_locale_core v2.3.0
    Checking potential_utf v0.1.6
   Compiling libc v0.2.191
   Compiling glob v0.3.4
   Compiling cfg-if v1.0.5
   Compiling clang-sys v1.9.1
    Checking core_maths v0.1.1
    Checking zerotrie v0.2.5
   Compiling serde v1.0.229
   Compiling icu_locale_fallback_data v2.3.0
   Compiling prettyplease v0.2.37
    Checking calendrical_calculations v0.2.4
   Compiling icu_calendar_data v2.3.0
   Compiling rustix v0.38.44
   Compiling crc32fast v1.5.3
   Compiling either v1.19.0
   Compiling minimal-lexical v0.2.1
   Compiling autocfg v1.5.1
   Compiling regex-syntax v0.8.11
   Compiling memchr v2.8.3
   Compiling bitflags v2.13.2
   Compiling nom v7.1.3
   Compiling regex-automata v0.4.18
   Compiling num-traits v0.2.19
    Checking resb v0.1.2
    Checking icu_provider v2.3.1
   Compiling libloading v0.8.9
   Compiling syn v2.0.119
   Compiling linux-raw-sys v0.4.15
   Compiling bindgen v0.72.1
    Checking icu_locale_fallback v2.3.0
    Checking zoneinfo64 v0.3.0
   Compiling regex v1.13.1
   Compiling cexpr v0.6.0
   Compiling itertools v0.13.0
   Compiling strck v1.0.0
   Compiling rustc-hash v2.1.3
   Compiling smallvec v1.16.3
   Compiling shlex v1.3.0
   Compiling home v0.5.12
   Compiling adler2 v2.0.1
   Compiling log v0.4.34
   Compiling miniz_oxide v0.8.9
   Compiling which v6.0.3
   Compiling diplomat_core v0.16.1
   Compiling gzip-header v1.1.0
    Checking icu_calendar v2.3.0
    Checking timezone_provider v0.2.6
   Compiling fslock v0.2.1
   Compiling paste v1.0.15
    Checking ixdtf v0.6.6
    Checking temporal_rs v0.2.6
   Compiling turbo-surf-v8 v149.3.0
   Compiling diplomat v0.16.1
    Checking diplomat-runtime v0.16.1
    Checking temporal_capi v0.2.6
error: failed to run custom build command for `turbo-surf-v8 v149.3.0`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/turbo-surf-v8-659e6c67551ac0e6/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-changed=.gn
  cargo:rerun-if-changed=BUILD.gn
  cargo:rerun-if-changed=src/binding.cc
  cargo:rerun-if-env-changed=CCACHE
  cargo:rerun-if-env-changed=CLANG_BASE_PATH
  cargo:rerun-if-env-changed=CXXSTDLIB
  cargo:rerun-if-env-changed=DENO_TRYBUILD
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=GN
  cargo:rerun-if-env-changed=GN_ARGS
  cargo:rerun-if-env-changed=HOST
  cargo:rerun-if-env-changed=NINJA
  cargo:rerun-if-env-changed=OUT_DIR
  cargo:rerun-if-env-changed=RUSTY_V8_ARCHIVE
  cargo:rerun-if-env-changed=RUSTY_V8_MIRROR
  cargo:rerun-if-env-changed=RUSTY_V8_SRC_BINDING_PATH
  cargo:rerun-if-env-changed=SCCACHE
  cargo:rerun-if-env-changed=V8_FORCE_DEBUG
  cargo:rerun-if-env-changed=V8_FROM_SOURCE
  cargo:rerun-if-env-changed=PYTHON
  cargo:rerun-if-env-changed=DISABLE_CLANG
  cargo:rerun-if-env-changed=EXTRA_GN_ARGS
  cargo:rerun-if-env-changed=PRINT_GN_ARGS
  cargo:rerun-if-env-changed=CARGO_ENCODED_RUSTFLAGS
  cargo:rustc-link-lib=static=rusty_v8
  lockfile: "/work/target/debug/build/v8.fslock"
  cargo:rustc-env=RUSTY_V8_SRC_BINDING_PATH=/cw/vendor/turbo-surf-v8-149.3.0/gen/src_binding_release_x86_64-unknown-linux-gnu.rs
  static lib URL: https://github.com/denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
  cargo:rustc-link-search=/work/target/debug/gn_out/obj
  Looking for download in '"/work/home/.cargo/.rusty_v8/https___github_com_denoland_rusty_v8_releases_download_v149_3_0_librusty_v8_release_x86_64_unknown_linux_gnu_a_gz"'
  Downloading https://github.com/denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
  Trying with Python...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 5 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 10 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 20 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v149.3.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Python downloader failed, trying with curl.

  --- stderr
  Traceback (most recent call last):
    File "/usr/lib/python3.13/urllib/request.py", line 1319, in do_open
      h.request(req.get_method(), req.selector, req.data, headers,
      ~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                encode_chunked=req.has_header('Transfer-encoding'))
                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1367, in request
      self._send_request(method, url, body, headers, encode_chunked)
      ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1413, in _send_request
      self.endheaders(body, encode_chunked=encode_chunked)
      ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1362, in endheaders
      self._send_output(message_body, encode_chunked=encode_chunked)
      ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1122, in _send_output
      self.send(msg)
      ~~~~~~~~~^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1066, in send
      self.connect()
      ~~~~~~~~~~~~^^
    File "/usr/lib/python3.13/http/client.py", line 1508, in connect
      self.sock = self._context.wrap_socket(self.sock,
                  ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^
                                            server_hostname=server_hostname)
                                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/ssl.py", line 455, in wrap_socket
      return self.sslsocket_class._create(
             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
          sock=sock,
          ^^^^^^^^^^
      ...<5 lines>...
          session=session
          ^^^^^^^^^^^^^^^
      )
      ^
    File "/usr/lib/python3.13/ssl.py", line 1076, in _create
      self.do_handshake()
      ~~~~~~~~~~~~~~~~~^^
    File "/usr/lib/python3.13/ssl.py", line 1372, in do_handshake
      self._sslobj.do_handshake()
      ~~~~~~~~~~~~~~~~~~~~~~~~~^^
  ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)

  During handling of the above exception, another exception occurred:

  Traceback (most recent call last):
    File "/cw/vendor/turbo-surf-v8-149.3.0/./tools/download_file.py", line 63, in <module>
      sys.exit(main())
               ~~~~^^
    File "/cw/vendor/turbo-surf-v8-149.3.0/./tools/download_file.py", line 58, in main
      DownloadUrl(args.url, f)
      ~~~~~~~~~~~^^^^^^^^^^^^^
    File "/cw/vendor/turbo-surf-v8-149.3.0/./tools/download_file.py", line 44, in DownloadUrl
      raise e
    File "/cw/vendor/turbo-surf-v8-149.3.0/./tools/download_file.py", line 28, in DownloadUrl
      response = urlopen(url)
    File "/usr/lib/python3.13/urllib/request.py", line 189, in urlopen
      return opener.open(url, data, timeout)
             ~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/urllib/request.py", line 489, in open
      response = self._open(req, data)
    File "/usr/lib/python3.13/urllib/request.py", line 506, in _open
      result = self._call_chain(self.handle_open, protocol, protocol +
                                '_open', req)
    File "/usr/lib/python3.13/urllib/request.py", line 466, in _call_chain
      result = func(*args)
    File "/usr/lib/python3.13/urllib/request.py", line 1367, in https_open
      return self.do_open(http.client.HTTPSConnection, req,
             ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                          context=self._context)
                          ^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/urllib/request.py", line 1322, in do_open
      raise URLError(err)
  urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>

  thread 'main' (1602) panicked at /cw/vendor/turbo-surf-v8-149.3.0/build.rs:735:3:
  assertion failed: status.success()
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-10-21 10:55 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-21 10:55 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-21 10:55 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot1
2026-10-21 10:57 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot1
2026-10-21 10:57 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-21 10:57 UTC	Scored	Done	finalized	analyzer-12816