Crateward

alef 0.114.2

Done dynamic on Linux job 261687 crates.io SBOM Findings (VEX)

medium severity process_spawn in build_script code (247 places): std::process::Command::new

19
low
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
10static:process_spawn
static · alef
build.rs:44medium severity process_spawn in build_script code (247 places): std::process::Command::new
2static:credential_access
static · alef
src/cli/pipeline/generate/write.rs:307medium severity credential_access in library code (5 places): .npmrc
2static:obfuscated_data
static · alef
src/backends/kotlin_android/gradle_wrapper.rs:28medium severity obfuscated_data in library code (2 places): distributionBase=GRADLE_USER_HOME\u{a}distributionPath=wrapper/dists\u{a}distributionUrl=https\://services.gradle.org/distributions/gradle-{gradle_version}-bin.zip\u{a}networkTimeout=10000\u{a}validat…
2static:secret_environment_variable
static · alef
src/cli/commands/check_registry.rs:352medium severity secret_environment_variable in library code (2 places): GITHUB_TOKEN
2static:shell_command
static · alef
src/cli/pipeline/commands/build/frb_version_check.rs:115medium severity shell_command in library code (7 places): must chmod +x
1static:build_script
static · alef
build.rslow severity build_script in build_script code: build.rs

Behavior

Profile

static:credential_access static:obfuscated_data static:process_spawn static:secret_environment_variable static:shell_command

Static findings

10 groups
medium shell_command library 7
medium credential_access library 5
medium obfuscated_data library 2
medium secret_environment_variable library 2
medium process_spawn build_script 1
low process_spawn library 246
low network_access library 28
low build_script build_script 1
info url_literal library 380
info unsafe_code library 10

Run: check

succeeded
Ended
agent reported the end
Guest
exit code 0
Run time
2 min 16 s
VM restore
96 ms
Payload
20333 files, 362.2 MiB
Files opened
34291

Processes 610

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 7 ms 2 min 16 s 0
└rustc /usr/local/bin/rustc ×48 --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow 446 ms 731 ms 0
└toolchain /usr/bin/cc -m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc9dgGyI/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib 1.0 s 158 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccnRXmZe.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc9dgGyI/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L 1.0 s 150 ms 0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccnRXmZe.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc9dgGyI/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 1.0 s 146 ms 0
└build_script proc-macro2 1.1 s 86 ms 0
└rustc /usr/local/bin/rustc ×3 --version 1.1 s 8 ms 0
└rustc /usr/local/bin/rustc --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-ea7d4b35dfd106d0/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu 1.1 s 34 ms 256
└build_script quote 1.3 s 10 ms 0
└rustc /usr/local/bin/rustc --version 1.3 s 7 ms 0
└rustc /usr/local/bin/rustc ×212 --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow 1.3 s 51 ms 0
└build_script libc 6.9 s 10 ms 0
└rustc /usr/local/bin/rustc --version 6.9 s 7 ms 0
└build_script serde_core 7.8 s 10 ms 0
└rustc /usr/local/bin/rustc --version 7.8 s 8 ms 0
└build_script num-traits 10.1 s 42 ms 0
└rustc /usr/local/bin/rustc ×3 --version --verbose 10.1 s 7 ms 0
└build_script serde 12.1 s 9 ms 0
└rustc /usr/local/bin/rustc --version 12.1 s 7 ms 0
└build_script zmij 20.7 s 10 ms 0
└rustc /usr/local/bin/rustc --version 20.7 s 7 ms 0
└build_script serde_json 22.3 s 2 ms 0
└build_script crc32fast 26.2 s 11 ms 0
└rustc /usr/local/bin/rustc --version 26.2 s 8 ms 0
└build_script rustversion 26.2 s 12 ms 0
└rustc /usr/local/bin/rustc --version 26.2 s 9 ms 0
└build_script ring 26.3 s 1.5 s 0
└toolchain /usr/bin/cc ×2 -E /work/target/debug/build/ring-33e4a446d5e81de3/out/10160914403328725230detect_compiler_family.c 26.3 s 22 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-33e4a446d5e81de3/out/10160914403328725230detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 10160914403328725230detect_compiler_family.c -dumpbase-ext .c 26.3 s 20 ms 0
└toolchain /usr/bin/cc ×2 -? 26.3 s 2 ms 256
└toolchain /usr/bin/cc ×32 -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/ring-33e4a446d5e81de3/out/flag_check -c /work/target/debug/build/ring-33e4a446d5e81de3/out/flag_check.c 26.3 s 32 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-33e4a446d5e81de3/out/flag_check.c -quiet -dumpdir /work/target/debug/build/ring-33e4a446d5e81de3/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccodQPGN.s 26.3 s 24 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/ring-33e4a446d5e81de3/out/flag_check /tmp/ccodQPGN.s 26.4 s 6 ms 0
└toolchain /usr/bin/ar ×4 cqD /work/target/debug/build/ring-33e4a446d5e81de3/out/libring_core_0_17_14_.a /work/target/debug/build/ring-33e4a446d5e81de3/out/b9fed4bd5e786284-curve25519.o /work/target/debug/build/ring-33e4a446d5e81de3/out/2b18790154092d07-aes_nohw.o /work/target/debug/build/ring-33e4a446d5e81de3/out/20d6a080d7761227-montgomery.o /work/target/debug/build/ring-33e4a446d5e81de3/out/20d6a080d7761227-montgomery_inv.o /work/target/debug/build/ring-33e4a446d5e81de3/out/abdfa25550f18ac7-ecp_nistz.o /work/target/debug/build/ring-33e4a446d5e81de3/out/abdfa25550f18ac7-gfp_p256.o /work/target/debug/build/ring-33e4a446d5e81de3/out/abdfa25550f18ac7-gfp_p384.o /work/target/debug/build/ring-33e4a446d5e81de3/out/abdfa25550f18ac7-p256.o /work/target/debug/build/ring-33e4a446d5e81de3/out/9fa4cd275cb9daeb-limbs.o /work/target/debug/build/ring-33e4a446d5e81de3/out/8948ea8e62ee340e-mem.o /work/target/debug/build/ring-33e4a446d5e81de3/out/e288d65bf9bc9ef0-poly1305.o /work/target/debug/build/ring-33e4a446d5e81de3/out/8948ea8e62ee340e-crypt 27.8 s 18 ms 0
└build_script rustix 30.7 s 38 ms 0
└rustc /usr/local/bin/rustc ×2 --crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-de87e437a93e79e6/out/rustix_test_can_compile - 30.7 s 19 ms 0
└build_script crossbeam-utils 30.7 s 2 ms 0
└build_script ref-cast 31.1 s 10 ms 0
└rustc /usr/local/bin/rustc --version 31.1 s 7 ms 0
└build_script getrandom 31.1 s 2 ms 0
└build_script zerocopy 31.4 s 10 ms 0
└rustc /usr/local/bin/rustc --version 31.4 s 7 ms 0
└build_script getrandom 38.3 s 1 ms 0
└build_script httparse 38.3 s 10 ms 0
└rustc /usr/local/bin/rustc --version 38.3 s 6 ms 0
└build_script crossbeam-epoch 38.3 s 2 ms 0
└build_script parking_lot_core 39.6 s 1 ms 0
└build_script ahash 43.0 s 10 ms 0
└rustc /usr/local/bin/rustc --verbose --version 43.0 s 8 ms 0
└build_script rustls 45.0 s 1 ms 0
└build_script crossbeam-deque 45.7 s 2 ms 0
└build_script icu_properties_data 45.7 s 1 ms 0
└build_script curve25519-dalek 46.7 s 10 ms 0
└rustc /usr/local/bin/rustc -vV 46.7 s 8 ms 0
└build_script encoding_rs 46.8 s 1 ms 0
└build_script unicode-general-category 50.3 s 266 ms 0
└build_script thiserror 50.7 s 27 ms 0
└rustc /usr/local/bin/rustc --edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-2a2ace9117c7add0/out/probe build/probe.rs --target x86_64-unknown-linux-gnu 50.7 s 17 ms 256
└rustc /usr/local/bin/rustc --version 50.7 s 7 ms 0
└build_script rayon-core 50.7 s 2 ms 0
└build_script jsonschema-value 52.4 s 2 ms 0
└build_script icu_casemap_data 53.0 s 1 ms 0
└build_script anyhow 1 min 3 s 37 ms 0
└rustc /usr/local/bin/rustc --cfg=anyhow_build_probe --edition=2018 --crate-name=anyhow --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/anyhow-16c5e2ddec703063/out/probe src/nightly.rs --target x86_64-unknown-linux-gnu 1 min 3 s 25 ms 256
└rustc /usr/local/bin/rustc --version 1 min 3 s 7 ms 0
└build_script blake3 1 min 8 s 167 ms 0
└toolchain /usr/bin/cc ×3 -E /work/target/debug/build/blake3-277e813a768a8383/out/8250020412441336629detect_compiler_family.c 1 min 8 s 6 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/blake3-277e813a768a8383/out/8250020412441336629detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 8250020412441336629detect_compiler_family.c -dumpbase-ext .c 1 min 8 s 5 ms 0
└toolchain /usr/bin/cc ×3 -? 1 min 8 s 3 ms 256
└toolchain /usr/bin/cc ×8 -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mavx512f -o /work/target/debug/build/blake3-277e813a768a8383/out/flag_check -c /work/target/debug/build/blake3-277e813a768a8383/out/flag_check.c 1 min 8 s 15 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/blake3-277e813a768a8383/out/flag_check.c -quiet -dumpdir /work/target/debug/build/blake3-277e813a768a8383/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mavx512f -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccQLJfJZ.s 1 min 8 s 11 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/blake3-277e813a768a8383/out/flag_check /tmp/ccQLJfJZ.s 1 min 8 s 2 ms 0
└toolchain /usr/bin/ar ×4 cqD /work/target/debug/build/blake3-277e813a768a8383/out/libblake3_sse2_sse41_avx2_assembly.a /work/target/debug/build/blake3-277e813a768a8383/out/0af7afa8371890fd-blake3_sse2_x86-64_unix.o /work/target/debug/build/blake3-277e813a768a8383/out/0af7afa8371890fd-blake3_sse41_x86-64_unix.o /work/target/debug/build/blake3-277e813a768a8383/out/0af7afa8371890fd-blake3_avx2_x86-64_unix.o 1 min 8 s 3 ms 0
└build_script alef 1 min 20 s 2 ms 0
└unknown ×3 1 min 20 s 0 ms 32512

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
1876
Directories
415
Size
624.6 MiB
Compiled units
241
Scan
stopped at a limit

Nothing outside the build areas.

Output

Standard error
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.27
   Compiling syn v3.0.9
    Checking cfg-if v1.0.5
   Compiling libc v0.2.191
   Compiling serde_core v1.0.229
   Compiling autocfg v1.5.1
    Checking memchr v2.8.3
   Compiling num-traits v0.2.19
   Compiling synstructure v0.14.0
   Compiling serde v1.0.229
    Checking zeroize v1.9.1
    Checking once_cell v1.21.4
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.15
   Compiling cc v1.10.0
   Compiling zerofrom-derive v0.1.8
   Compiling serde_derive v1.0.229
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling syn v2.0.119
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.4
    Checking itoa v1.0.18
   Compiling zmij v1.0.23
    Checking const-oid v0.10.2
   Compiling zerovec-derive v0.11.7
    Checking typenum v1.20.1
   Compiling serde_json v1.0.154
    Checking log v0.4.34
    Checking hybrid-array v0.4.15
    Checking zerovec v0.11.9
    Checking num-integer v0.1.47
   Compiling ring v0.17.14
   Compiling displaydoc v0.2.7
    Checking base64ct v1.8.3
   Compiling rustversion v1.0.23
    Checking regex-syntax v0.8.11
    Checking smallvec v1.16.4
    Checking scopeguard v1.2.0
   Compiling crc32fast v1.5.3
    Checking pem-rfc7468 v1.0.0
    Checking aho-corasick v1.1.5
   Compiling zerocopy v0.8.63
   Compiling version_check v0.9.5
    Checking allocator-api2 v0.2.21
   Compiling semver v1.0.28
   Compiling getrandom v0.3.4
   Compiling ref-cast v1.0.27
    Checking foldhash v0.2.0
    Checking equivalent v1.0.3
    Checking simd-adler32 v0.3.10
   Compiling crossbeam-utils v0.8.23
    Checking writeable v0.6.4
   Compiling rustix v1.1.5
    Checking hashbrown v0.17.1
   Compiling rustc_version v0.4.1
   Compiling ahash v0.8.12
    Checking regex-automata v0.4.18
    Checking der v0.8.2
    Checking num-bigint v0.4.8
    Checking block-buffer v0.12.1
    Checking crypto-common v0.2.2
    Checking rustls-pki-types v1.15.1
    Checking getrandom v0.2.17
   Compiling ref-cast-impl v1.0.27
    Checking linux-raw-sys v0.12.1
   Compiling parking_lot_core v0.9.12
    Checking bitflags v2.13.2
    Checking anstyle v1.0.14
    Checking adler2 v2.0.1
   Compiling crossbeam-epoch v0.9.21
    Checking cpufeatures v0.3.1
   Compiling httparse v1.10.1
   Compiling getrandom v0.4.3
    Checking untrusted v0.9.0
   Compiling heck v0.5.0
    Checking subtle v2.6.1
    Checking miniz_oxide v0.9.1
    Checking digest v0.11.3
    Checking num-rational v0.4.2
   Compiling encoding_rs v0.8.42
    Checking spki v0.8.1
   Compiling curve25519-dalek v5.0.0
    Checking tinystr v0.8.5
    Checking num-iter v0.1.46
    Checking num-complex v0.4.6
    Checking zlib-rs v0.6.8
    Checking percent-encoding v2.3.2
   Compiling icu_properties_data v2.4.0
   Compiling crossbeam-deque v0.8.8
    Checking litemap v0.8.3
    Checking utf8parse v0.2.2
   Compiling rustls v0.23.46
    Checking anstyle-parse v1.0.0
    Checking icu_locale_core v2.4.0
    Checking flate2 v1.1.10
    Checking http v1.5.0
    Checking num v0.4.3
    Checking pkcs8 v0.11.0
    Checking rustls-webpki v0.103.16
    Checking potential_utf v0.1.6
    Checking lock_api v0.4.14
    Checking zerotrie v0.2.5
   Compiling curve25519-dalek-derive v0.1.1
    Checking tracing-core v0.1.36
    Checking is_terminal_polyfill v1.70.2
   Compiling icu_casemap_data v2.4.0
    Checking core_detect v1.0.0
    Checking borrow-or-share v0.2.4
    Checking colorchoice v1.0.5
   Compiling jsonschema-value v0.60.1
    Checking simdutf8 v0.1.5
    Checking signature v3.0.0
    Checking winnow v1.0.4
    Checking base64 v0.23.1
    Checking utf8_iter v1.0.4
   Compiling multiversion_no_op v1.0.0
    Checking bit-vec v0.8.0
   Compiling rayon-core v1.13.0
   Compiling thiserror v2.0.21
    Checking anstyle-query v1.1.5
   Compiling unicode-general-category v1.1.0
    Checking anstream v1.0.0
    Checking bit-set v0.8.0
    Checking icu_collections v2.4.0
    Checking ureq-proto v0.6.5
    Checking toml_parser v1.1.5+spec-1.1.0
    Checking ed25519 v3.0.0
    Checking fluent-uri v0.4.1
    Checking icu_provider v2.4.0
    Checking parking_lot v0.12.5
    Checking fraction v0.17.0
    Checking sha2 v0.11.1
    Checking xattr v1.6.1
   Compiling strum_macros v0.28.0
    Checking webpki-roots v1.0.11
    Checking indexmap v2.14.2
   Compiling tracing-attributes v0.1.31
   Compiling blake3 v1.8.7
    Checking toml_datetime v1.1.2+spec-1.1.0
    Checking filetime v0.2.29
   Compiling thiserror-impl v2.0.21
   Compiling serde_derive_internals v0.30.0
    Checking arraydeque v0.5.1
    Checking outref v0.5.2
    Checking bumpalo v3.20.3
    Checking clap_lex v1.1.1
    Checking micromap v0.3.0
    Checking utf8-zero v0.8.1
    Checking strsim v0.11.1
    Checking lazy_static v1.5.1
    Checking num-cmp v0.1.0
   Compiling anyhow v1.0.104
    Checking unicode-width v0.2.2
    Checking pin-project-lite v0.2.17
    Checking toml_writer v1.1.3+spec-1.1.0
    Checking fastrand v2.5.0
    Checking vsimd v0.8.0
    Checking bytecount v0.6.9
    Checking uuid-simd v0.8.0
    Checking tempfile v3.27.0
    Checking tracing v0.1.44
    Checking annotate-snippets v0.12.17
    Checking sharded-slab v0.1.7
    Checking clap_builder v4.6.7
    Checking ureq v3.5.0
    Checking referencing v0.60.1
    Checking zopfli v0.8.4
    Checking granit-parser v2.0.0
   Compiling schemars_derive v1.2.3
    Checking tar v0.4.46
    Checking strum v0.28.0
    Checking ed25519-dalek v3.0.0
    Checking icu_properties v2.4.0
    Checking encoding_rs_io v0.1.8
    Checking fancy-regex v0.19.2
    Checking tracing-log v0.2.0
   Compiling clap_derive v4.6.7
    Checking regex v1.13.1
    Checking matchers v0.2.0
    Checking jsonschema-regex v0.60.1
    Checking email_address v0.2.9
    Checking serde_spanned v1.1.2
    Checking fs2 v0.4.3
    Checking libloading v0.9.0
    Checking thread_local v1.1.10
    Checking nu-ansi-term v0.50.3
    Checking alef-component-abi v0.114.2
    Checking iana-time-zone v0.1.65
    Checking unicode-segmentation v1.13.3
    Checking constant_time_eq v0.4.2
   Compiling alef v0.114.2
    Checking typed-path v0.13.0
    Checking either v1.19.0
    Checking same-file v1.0.6
    Checking hex v0.4.3
    Checking dyn-clone v1.0.20
    Checking arrayvec v0.7.8
    Checking data-encoding v2.11.1
    Checking jsonschema v0.60.1
    Checking schemars v1.2.3
    Checking alef-component-runtime v0.114.2
    Checking walkdir v2.5.0
    Checking rayon v1.12.0
    Checking zip v9.1.0
    Checking convert_case v0.12.0
    Checking chrono v0.4.45
    Checking tracing-subscriber v0.3.23
    Checking toml v1.1.8+spec-1.1.0
    Checking clap v4.6.7
    Checking serde-saphyr v2.0.0
    Checking icu_casemap v2.4.0
    Checking toml_edit v0.25.17+spec-1.1.0
    Checking minijinja v3.0.3
    Checking which v8.0.6
    Checking glob v0.3.4
    Checking similar v3.2.1
    Checking crateward-probe v0.0.0 (/cw/probe)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2m 16s

Timeline

6
WhenFromToEventWorker
2026-10-24 20:09 UTCDiscoveredFetchedfetchedfetcher-12688
2026-10-24 20:09 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-12726
2026-10-24 20:20 UTCReadyForSandboxRunningsandbox_startedorchestrator-12760-slot2
2026-10-24 20:23 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-12760-slot2
2026-10-24 20:23 UTCDynamicallyAnalyzedScoredscoredanalyzer-12816
2026-10-24 20:23 UTCScoredDonefinalizedanalyzer-12816