volant 0.1.0-alpha.13

Done dynamic on Linux job 282790 crates.io SBOM Findings (VEX)

medium severity process_spawn in build_script code (228 places): std::process::Command::new

low

Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

Points	Signal	Where	What
10	static:process_spawn static · volant	build.rs:12	medium severity process_spawn in build_script code (228 places): std::process::Command::new
2	static:credential_access static · volant	src/action_plugins/fetch/tests.rs:898	medium severity credential_access in library code (5 places): ~/.kube/config
2	static:environment_enumeration static · volant	src/runtime/tool.rs:58	medium severity environment_enumeration in library code (8 places): std::env::vars_os
2	static:secret_environment_variable static · volant	src/transport/ssm.rs:128	medium severity secret_environment_variable in library code (4 places): AWS_ACCESS_KEY_ID
2	static:shell_command static · volant	src/python/tests.rs:193	medium severity shell_command in library code (7 places): #!powershell\u{a}
1	static:build_script static · volant	build.rs	low severity build_script in build_script code: build.rs

Behavior

New since the previous version

static:secret_environment_variable

Profile

static:credential_access static:environment_enumeration static:process_spawn static:secret_environment_variable static:shell_command

Static findings

All 323 medium 19 low 232 info 72 16 groups

medium credential_access library 4

~/.kube/config src/action_plugins/fetch/tests.rs:898
.kube/config src/action_plugins/fetch/tests.rs:898
id_ed25519 src/union_cache/tests.rs:560 src/union_cache/tests.rs:580

medium secret_environment_variable library 4

AWS_ACCESS_KEY_ID src/transport/ssm.rs:128 src/transport/ssm/tests.rs:62
AWS_SECRET_ACCESS_KEY src/transport/ssm.rs:133
AWS_SESSION_TOKEN src/transport/ssm.rs:138

medium shell_command library 4

#!powershell\u{a} src/python/tests.rs:193 src/python/tests.rs:194
/bin/sh -c {} src/transport/escalation/su.rs:108
exec 'su' 'root' -c '/bin/sh -c '\''stty raw -echo -iexten || exit 1; echo MARK-42; uname -m'\''' src/transport/tests.rs:178

medium shell_command test 3

printf %s "$1" | base64 -d tests/common/compare.rs:466
base64 -d refused {encoded} tests/common/compare.rs:470
powershell tests/parity.rs:161

medium environment_enumeration library 2

std::env::vars_os src/runtime/tool.rs:58 src/union_cache/key.rs:92

medium credential_access test 1

{}/.kube/config tests/kubectl_e2e.rs:125

medium process_spawn build_script 1

std::process::Command::new build.rs:12

low process_spawn test 158

low process_spawn library 69

low network_access library 4

tokio::net::unix::pipe::Receiver src/transport/escalation/local_su.rs:147
tokio::net::unix::pipe::Sender src/transport/escalation/local_su.rs:163
tokio::net::unix::pipe::Receiver::from_owned_fd_unchecked src/transport/escalation/local_su.rs:166
tokio::net::unix::pipe::Sender::from_owned_fd_unchecked src/transport/escalation/local_su.rs:167

low build_script build_script 1

build.rs build.rs

info unsafe_code library 30

1 unsafe blocks, functions or impls src/agent/embedded.rs:186 src/askpass.rs:141 src/cli/console/session.rs:278 src/cli/vault.rs:381 src/cli/vault_string.rs:53 src/runtime/install.rs:369 src/transport/buildah/tests.rs:14 src/transport/chroot.rs:118 src/transport/chroot/tests.rs:67 src/transport/lxd/tests.rs:17 src/transport/podman/tests.rs:38 src/union_cache/entry.rs:76 src/union_cache/sweep.rs:63 src/union_cache/tests.rs:777
3 unsafe blocks, functions or impls src/agent/embedded/tests.rs:81 src/transport/control.rs:135 src/transport/kubectl/tests.rs:22 src/transport/ssm/tests.rs:19
4 unsafe blocks, functions or impls src/cli/pull/names.rs:36 src/executor/run/tests.rs:4335 src/transport/escalation/local_su.rs:116
2 unsafe blocks, functions or impls src/cli/signals.rs:44 src/runtime/tool.rs:119 src/template/clock.rs:194 src/transport/agent_dir/tests.rs:161 src/transport/docker/tests.rs:106
8 unsafe blocks, functions or impls src/cli/tests.rs:83
5 unsafe blocks, functions or impls src/cli/vault_edit.rs:55 src/transport/tests.rs:802
31 unsafe blocks, functions or impls src/config/tests.rs:121

info url_literal library 20

file://{expanded} src/cli/pull/git.rs:132
Ansible is being run in a world writable directory ({}), ignoring it as an ansible.cfg source. For more information see https://docs.ansible.com/ansible/devel/reference_appendices/config.html#cfg-in-w… src/config/locate.rs:90
Ansible is being run in a world writable directory (/tmp/x), ignoring it as an ansible.cfg source. For more information see https://docs.ansible.com/ansible/devel/reference_appendices/config.html#cfg-… src/config/tests.rs:640
[docker_connection]\u{a}extra_cli_args = --host tcp://h\u{a}privileged = yes\u{a}working_dir = /srv\u{a}timeout = 30\u{a}[chroot_connection]\u{a}exe = /usr/sbin/chroot\u{a}disable_root_check = true… src/config/tests.rs:872
--host tcp://h src/config/tests.rs:878
See https://docs.ansible.com/ansible-core/2.19/reference_appendices/interpreter_discovery.html for more information. src/executor/run/interpreter.rs:112
- name: Set same timezone on every Server\u{a} community.general.timezone:\u{a} name: "{{ system_timezone }}"\u{a} when: (system_timezone is defined) and (system_timezone != "Your/Timezone")\u{a}… src/facts_read/tests.rs:200
https:// src/runtime/fetch.rs:75 src/runtime/manifest.rs:158
\u{a}python = "3.13.16"\u{a}python-release = "20261013"\u{a}ansible-core = "2.19.12"\u{a}\u{a}[platform.x86_64-unknown-linux-gnu.python]\u{a}url = "https://example.invalid/python.tar.gz"\u{a}sha256 = … src/runtime/tests.rs:73
https://example.invalid/x src/runtime/tests.rs:153 src/runtime/tests.rs:187
file:///etc/hostname src/runtime/tests.rs:193
{{ hs | map('extract', hv, 'ip') | map('regex_replace', '^(.*)$', 'https://\1:6443') | join(',') }} src/template/tests.rs:698
--host unix:///cfg src/transport/docker/tests.rs:112
unix:///cfg src/transport/docker/tests.rs:127
https://b:6443 src/transport/kubectl/tests.rs:87
https://h:6443 src/transport/kubectl/tests.rs:121
https://s:6443 src/transport/kubectl/tests.rs:122 src/transport/kubectl/tests.rs:133

info unsafe_code test 11

1 unsafe blocks, functions or impls tests/askpass.rs:99 tests/common/process.rs:85 tests/ssh_e2e.rs:2232
2 unsafe blocks, functions or impls tests/common/compare.rs:114 tests/reference_modules.rs:439
6 unsafe blocks, functions or impls tests/console_pull.rs:273
3 unsafe blocks, functions or impls tests/exec_transport.rs:75 tests/playbook_cli.rs:2673 tests/reference.rs:64
4 unsafe blocks, functions or impls tests/local_transport.rs:451
7 unsafe blocks, functions or impls tests/vault_cli.rs:376

info environment_enumeration test 6

std::env::vars, keys only tests/fetch_dest.rs:108 tests/host_named_paths.rs:373 tests/host_named_paths.rs:618 tests/reference.rs:623 tests/reference_modules.rs:93 tests/reference_modules.rs:193

info url_literal test 5

file://{} tests/console_pull.rs:409
[WARNING]: Ansible is being run in a world writable directory ({}), ignoring it as an ansible.cfg source. For more information see https://docs.ansible.com/ansible/devel/reference_appendices/config.ht… tests/playbook_cli.rs:1076
- hosts: localhost\u{a} gather_facts: false\u{a} tasks:\u{a} - name: Probe task\u{a} debug:\u{a} msg: "{{ item }}"\u{a} with_url: ["file://{{ playbook_dir }}/task-with_url.yml"]… tests/playbook_cli.rs:3798
https://github.com/lorica-labs/volant/issues/920 tests/shadow_golden.rs:19 tests/shadow_golden.rs:23

Run: check

succeeded

Ended: agent reported the end
Guest: exit code 0
Run time: 53.2 s
VM restore: 122 ms
Payload: 6611 files, 93.9 MiB
Files opened: 13063

Processes 270

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 251 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	check --locked --offline	5 ms	53.2 s	0
└rustc /usr/local/bin/rustc ×21	--crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow	236 ms	667 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcsMPinh/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib	752 ms	148 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccomCMMm.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcsMPinh/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	760 ms	140 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccomCMMm.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcsMPinh/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6	763 ms	135 ms	0
└build_script proc-macro2		907 ms	87 ms	0
└rustc /usr/local/bin/rustc ×3	--version	909 ms	7 ms	0
└rustc /usr/local/bin/rustc	--cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu	918 ms	34 ms	256
└rustc /usr/local/bin/rustc ×97	--crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	994 ms	53 ms	0
└build_script quote		1.1 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	1.1 s	7 ms	0
└build_script generic-array		5.1 s	10 ms	0
└rustc /usr/local/bin/rustc	--verbose --version	5.1 s	8 ms	0
└build_script libc		5.9 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	5.9 s	8 ms	0
└build_script serde_core		9.8 s	18 ms	0
└rustc /usr/local/bin/rustc	--version	9.8 s	11 ms	0
└build_script serde		12.6 s	10 ms	0
└rustc /usr/local/bin/rustc	--version	12.6 s	8 ms	0
└build_script thiserror		15.6 s	30 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-8658b25ef1050b90/out/probe build/probe.rs --target x86_64-unknown-linux-gnu	15.6 s	17 ms	256
└rustc /usr/local/bin/rustc	--version	15.6 s	8 ms	0
└build_script zmij		15.8 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	15.8 s	8 ms	0
└build_script num-traits		16.2 s	45 ms	0
└rustc /usr/local/bin/rustc ×3	--version --verbose	16.2 s	7 ms	0
└build_script rustix		17.8 s	37 ms	0
└rustc /usr/local/bin/rustc ×2	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-de87e437a93e79e6/out/rustix_test_can_compile -	17.8 s	17 ms	0
└build_script serde_json		17.9 s	1 ms	0
└build_script getrandom		18.0 s	2 ms	0
└build_script libmimalloc-sys		18.1 s	1.0 s	0
└toolchain /usr/bin/cc	-E /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/17075829251264716349detect_compiler_family.c	18.1 s	24 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/17075829251264716349detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 17075829251264716349detect_compiler_family.c -dumpbase-ext .c	18.1 s	22 ms	0
└toolchain /usr/bin/cc	-?	18.2 s	2 ms	256
└toolchain /usr/bin/cc ×3	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/flag_check -c /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/flag_check.c	18.2 s	34 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/flag_check.c -quiet -dumpdir /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccCvlSXT.s	18.2 s	25 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/flag_check /tmp/ccCvlSXT.s	18.2 s	7 ms	0
└toolchain /usr/bin/ar ×2	cqD /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/libmimalloc.a /work/target/debug/build/libmimalloc-sys-b40cca4be9764b8a/out/93acce08ba6f4ffe-static.o	19.1 s	7 ms	0
└build_script nix		19.7 s	1 ms	0
└build_script anyhow		26.9 s	35 ms	0
└rustc /usr/local/bin/rustc	--cfg=anyhow_build_probe --edition=2018 --crate-name=anyhow --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/anyhow-16c5e2ddec703063/out/probe src/nightly.rs --target x86_64-unknown-linux-gnu	26.9 s	24 ms	256
└rustc /usr/local/bin/rustc	--version	27.0 s	7 ms	0
└build_script blake3		29.6 s	187 ms	0
└toolchain /usr/bin/cc ×3	-E /work/target/debug/build/blake3-277e813a768a8383/out/15362578913507466582detect_compiler_family.c	29.6 s	6 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/blake3-277e813a768a8383/out/15362578913507466582detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 15362578913507466582detect_compiler_family.c -dumpbase-ext .c	29.6 s	5 ms	0
└toolchain /usr/bin/cc ×3	-?	29.6 s	2 ms	256
└toolchain /usr/bin/cc ×8	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mavx512f -o /work/target/debug/build/blake3-277e813a768a8383/out/flag_check -c /work/target/debug/build/blake3-277e813a768a8383/out/flag_check.c	29.6 s	17 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/blake3-277e813a768a8383/out/flag_check.c -quiet -dumpdir /work/target/debug/build/blake3-277e813a768a8383/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mavx512f -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccx74sFR.s	29.6 s	13 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/blake3-277e813a768a8383/out/flag_check /tmp/ccx74sFR.s	29.6 s	2 ms	0
└toolchain /usr/bin/ar ×4	cqD /work/target/debug/build/blake3-277e813a768a8383/out/libblake3_sse2_sse41_avx2_assembly.a /work/target/debug/build/blake3-277e813a768a8383/out/0af7afa8371890fd-blake3_sse2_x86-64_unix.o /work/target/debug/build/blake3-277e813a768a8383/out/0af7afa8371890fd-blake3_sse41_x86-64_unix.o /work/target/debug/build/blake3-277e813a768a8383/out/0af7afa8371890fd-blake3_avx2_x86-64_unix.o	29.7 s	2 ms	0
└build_script volant		40.3 s	2 ms	0
└unknown		40.3 s	0 ms	32512

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 869
Directories: 205
Size: 280.3 MiB
Compiled units: 112

Nothing outside the build areas.

Output

Standard error

   Compiling proc-macro2 v1.0.107
   Compiling unicode-ident v1.0.27
   Compiling quote v1.0.47
   Compiling syn v3.0.9
   Compiling version_check v0.9.5
   Compiling generic-array v0.14.7
    Checking typenum v1.20.1
   Compiling libc v0.2.191
    Checking foldhash v0.2.0
    Checking cfg-if v1.0.5
    Checking hashbrown v0.17.1
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.15
   Compiling cc v1.10.0
    Checking crypto-common v0.1.7
   Compiling serde_core v1.0.229
    Checking memchr v2.8.3
    Checking equivalent v1.0.3
    Checking indexmap v2.14.2
   Compiling serde v1.0.229
    Checking utf8parse v0.2.2
   Compiling autocfg v1.5.1
   Compiling num-traits v0.2.19
    Checking block-buffer v0.10.4
   Compiling serde_derive v1.0.229
    Checking bitflags v2.13.2
   Compiling zmij v1.0.23
   Compiling cfg_aliases v0.2.2
   Compiling thiserror v2.0.21
    Checking subtle v2.6.1
    Checking digest v0.10.7
   Compiling nix v0.31.3
    Checking anstyle-parse v1.0.0
   Compiling libmimalloc-sys v0.1.49
    Checking inout v0.1.4
   Compiling thiserror-impl v2.0.21
    Checking is_terminal_polyfill v1.70.2
    Checking anstyle-query v1.1.5
   Compiling getrandom v0.4.3
    Checking anstyle v1.0.14
    Checking colorchoice v1.0.5
   Compiling serde_json v1.0.154
   Compiling rustix v1.1.5
    Checking anstream v1.0.0
    Checking cipher v0.4.4
    Checking aho-corasick v1.1.5
   Compiling blake3 v1.8.7
    Checking errno v0.3.14
    Checking linux-raw-sys v0.12.1
    Checking adler2 v2.0.1
   Compiling heck v0.5.0
   Compiling anyhow v1.0.104
    Checking clap_lex v1.1.1
    Checking itoa v1.0.18
    Checking regex-syntax v0.8.11
    Checking arraydeque v0.5.1
    Checking cpufeatures v0.2.17
    Checking strsim v0.11.1
    Checking winnow v1.0.4
    Checking toml_parser v1.1.5+spec-1.1.0
    Checking clap_builder v4.6.7
    Checking saphyr-parser v0.2.2
    Checking regex-automata v0.4.18
   Compiling clap_derive v4.6.7
    Checking miniz_oxide v0.9.1
    Checking signal-hook-registry v1.4.8
    Checking ordered-float v5.5.1
    Checking minijinja v3.0.1
    Checking hmac v0.12.1
    Checking hashlink v0.12.2
    Checking encoding_rs v0.8.35
    Checking mio v1.2.4
    Checking socket2 v0.6.5
   Compiling tokio-macros v2.7.2
    Checking once_cell v1.21.4
    Checking arrayvec v0.7.8
   Compiling volant v0.1.0-alpha.13
    Checking unicode-width v0.2.2
    Checking sha1_smol v1.0.1
    Checking toml_datetime v1.1.2+spec-1.1.0
    Checking unicode-segmentation v1.13.3
    Checking constant_time_eq v0.4.2
    Checking pin-project-lite v0.2.17
    Checking cpufeatures v0.3.1
    Checking fastrand v2.5.0
    Checking tokio v1.54.1
    Checking tempfile v3.27.0
    Checking rustyline v19.0.0
    Checking toml_edit v0.25.17+spec-1.1.0
    Checking volant-protocol v0.1.0-alpha.13
    Checking saphyr v0.2.2
    Checking pbkdf2 v0.12.2
    Checking minijinja-contrib v3.0.1
    Checking mimalloc v0.1.52
    Checking clap v4.6.7
    Checking regex v1.13.1
    Checking sha2 v0.10.9
    Checking aes v0.8.4
    Checking ctr v0.9.2
    Checking crateward-probe v0.0.0 (/cw/probe)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 53.15s

Timeline

When	From	To	Event	Worker
2026-10-26 23:28 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-26 23:28 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-26 23:29 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot2
2026-10-26 23:30 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot2
2026-10-26 23:30 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-26 23:30 UTC	Scored	Done	finalized	analyzer-12816