hush-secrets 0.1.28
medium severity process_spawn in build_script code (17 places): std::process::Command::new
19
low
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.
Evidence
| Points | Signal | Where | What |
|---|---|---|---|
| 10 | static:process_spawn static · hush-secrets | build.rs:49 | medium severity process_spawn in build_script code (17 places): std::process::Command::new |
| 2 | static:credential_access static · hush-secrets | src/keychain.rs:56 | medium severity credential_access in library code: Library/Keychains/login.keychain-db |
| 2 | static:environment_enumeration static · hush-secrets | src/run.rs:148 | medium severity environment_enumeration in library code (3 places): std::env::vars |
| 2 | static:secret_environment_variable static · hush-secrets | src/names.rs:117 | medium severity secret_environment_variable in library code (19 places): ANTHROPIC_API_KEY |
| 2 | static:shell_command static · hush-secrets | tests/run.rs:119 | medium severity shell_command in test code: curl -sS -x "$HTTP_PROXY" -H "Authorization: Bearer $DEMO_KEY" |
| 1 | static:build_script static · hush-secrets | build.rs | low severity build_script in build_script code: build.rs |
Behavior
Profile
static:credential_access static:environment_enumeration static:process_spawn static:secret_environment_variable static:shell_command
Static findings
16 groups
medium secret_environment_variable library 14
medium secret_environment_variable test 5
OPENAI_API_KEYtests/secret.rs:87 tests/secret.rs:95 tests/secret.rs:109 tests/secret.rs:132OPENAI_API_KEY (profile acme)tests/secret.rs:129
medium environment_enumeration library 3
std::env::varssrc/run.rs:148 src/run.rs:177 src/run.rs:189
medium credential_access library 1
Library/Keychains/login.keychain-dbsrc/keychain.rs:56
medium process_spawn build_script 1
std::process::Command::newbuild.rs:49
medium shell_command test 1
curl -sS -x "$HTTP_PROXY" -H "Authorization: Bearer $DEMO_KEY"tests/run.rs:119
low network_access library 28
std::net::TcpStreamsrc/proxy.rs:40 src/proxy.rs:41 src/proxy.rs:127 src/proxy.rs:173 src/proxy.rs:284 src/proxy.rs:284 src/proxy.rs:3223 src/proxy.rs:3243 src/proxy.rs:3245std::net::TcpListener::bindsrc/proxy.rs:93 src/proxy.rs:3080 src/proxy.rs:3141 src/proxy.rs:3659 src/proxy.rs:3692 src/proxy.rs:3738 src/proxy.rs:3772 src/proxy.rs:3889std::net::TcpStream::connectsrc/proxy.rs:141 src/proxy.rs:180 src/proxy.rs:3224 src/proxy.rs:3443 src/proxy.rs:3637 src/proxy.rs:3671 src/proxy.rs:3707 src/proxy.rs:3753 src/proxy.rs:3850 src/proxy.rs:3875std::net::UdpSocket::bindsrc/proxy.rs:3729
low process_spawn test 13
std::process::Command::newtests/harden.rs:14 tests/prompt.rs:11 tests/run.rs:42 tests/run.rs:376 tests/secret.rs:33 tests/secret.rs:851 tests/secret.rs:873std::process::Commandtests/run.rs:41 tests/run.rs:55 tests/run.rs:61 tests/secret.rs:28 tests/secret.rs:32 tests/secret.rs:56
low process_spawn library 3
std::process::Commandsrc/harden.rs:98std::process::Command::newsrc/run.rs:231 src/run.rs:623
low build_script build_script 1
build.rsbuild.rs
low foreign_functions library 1
extern blocksrc/harden.rs:56
low network_access test 1
std::net::TcpListener::bindtests/run.rs:87
info url_literal library 29
# comment\u{a}\u{a}BILLING_API_KEY=\u{a} STRIPE_SECRET_KEY = sk_ignored\u{a}export EXPORTED_KEY=x\u{a}DATABASE_URL=postgres://\u{a}KEYRING=x\u{a}BARE_KEY\u{a}not a pair\u{a}src/names.rs:104http://src/proxy.rs:1547://src/proxy.rs:1586http://API.example.com/v1src/proxy.rs:2112http://api.example.comsrc/proxy.rs:2116HTTP://api.example.com/v1src/proxy.rs:2120HTTP://evil.com/v1src/proxy.rs:2124http://api.example.com./v1src/proxy.rs:2126http://api.example.com@evil.com/v1src/proxy.rs:2131http://evil.com@api.example.com/v1src/proxy.rs:2136http://api.example.com:80:80/v1src/proxy.rs:2141http://api.example.com?@evil.com/src/proxy.rs:2146http://api.example.com#@evil.com/src/proxy.rs:2151http://api.example.com/v1src/proxy.rs:2155https://api.example.com/v1src/proxy.rs:3014http://u:p@api.example.com:80?xsrc/proxy.rs:3017https://evil.example.com/v1src/proxy.rs:3026https://api.example.com@evil.com/src/proxy.rs:3030https://attacker.example/v1src/proxy.rs:3387https://user@localhost:8443/v1src/proxy.rs:3418http://localhost:{}/v1src/proxy.rs:3445 src/proxy.rs:3639 src/proxy.rs:3674 src/proxy.rs:3710 src/proxy.rs:3878http://{lan}:{port}/v1src/proxy.rs:3755{method} http://127.0.0.1:{port}/v1 HTTP/1.1\u{d}\u{a}Host: 127.0.0.1:{port}\u{d}\u{a}Authorization: Bearer {PLACEHOLDER}\u{d}\u{a}\u{d}\u{a}src/proxy.rs:3852http://127.0.0.1:{port}src/run.rs:106http://127.0.0.1:4242src/run.rs:603
info url_literal test 10
echo "key=$DEMO_KEY"; env; {CURL} "http://127.0.0.1:$BOUND/"; {CURL} "http://127.0.0.1:$OTHER/"tests/run.rs:127{CURL} -o /dev/null "http://127.0.0.1:$BOUND/"tests/run.rs:176 tests/run.rs:239 tests/run.rs:519 tests/run.rs:539trap 'echo interrupted' INT\u{a}{CURL} -o /dev/null "http://127.0.0.1:$BOUND/"\u{a}sleep 30 >/dev/null 2>&1 &\u{a}touch "$READY"\u{a}wait $!\u{a}kill $! 2>/dev/null\u{a}{CURL} "http://127.0.0.1:$BOUND…tests/run.rs:335printf '%s\n' "$DEMO_KEY"; {CURL} -o /dev/null "http://127.0.0.1:$BOUND/"tests/run.rs:420 tests/run.rs:588{CURL} "http://127.0.0.1:$BOUND/"tests/run.rs:652 tests/run.rs:738
info unsafe_code library 4
4 unsafe blocks, functions or implssrc/harden.rs:196 unsafe blocks, functions or implssrc/keychain.rs:471 unsafe blocks, functions or implssrc/proxy.rs:2602 unsafe blocks, functions or implssrc/run.rs:240
info unsafe_code test 4
1 unsafe blocks, functions or implstests/harden.rs:45 tests/prompt.rs:18 tests/run.rs:3593 unsafe blocks, functions or implstests/secret.rs:35
Run: check
succeeded- Ended
- agent reported the end
- Guest
- exit code 0
- Run time
- 1 min 7 s
- VM restore
- 80 ms
- Payload
- 8781 files, 161.7 MiB
- Files opened
- 25812
Processes 491
Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.
| Process | Arguments | Start | Took | Exit |
|---|---|---|---|---|
| cargo /usr/local/bin/cargo | check --locked --offline | 5 ms | 1 min 7 s | 0 |
| └rustc /usr/local/bin/rustc ×34 | --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow | 319 ms | 696 ms | 0 |
| └toolchain /usr/bin/cc | -m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustclrV8YY/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib | 858 ms | 154 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 | -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccKDmPJ9.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustclrV8YY/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L | 865 ms | 147 ms | 0 |
| └toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld | -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccKDmPJ9.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustclrV8YY/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 | 867 ms | 144 ms | 0 |
| └build_script proc-macro2 | 1.0 s | 81 ms | 0 | |
| └rustc /usr/local/bin/rustc ×3 | --version | 1.0 s | 7 ms | 0 |
| └rustc /usr/local/bin/rustc | --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu | 1.0 s | 33 ms | 256 |
| └rustc /usr/local/bin/rustc ×205 | --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow | 1.1 s | 57 ms | 0 |
| └build_script quote | 1.2 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 1.2 s | 8 ms | 0 |
| └build_script libc | 5.8 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 5.8 s | 8 ms | 0 |
| └build_script generic-array | 10.3 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --verbose --version | 10.3 s | 7 ms | 0 |
| └build_script serde_core | 11.3 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 11.3 s | 7 ms | 0 |
| └build_script serde | 11.4 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 11.4 s | 7 ms | 0 |
| └build_script thiserror | 17.2 s | 27 ms | 0 | |
| └rustc /usr/local/bin/rustc | --edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-2a2ace9117c7add0/out/probe build/probe.rs --target x86_64-unknown-linux-gnu | 17.2 s | 17 ms | 256 |
| └rustc /usr/local/bin/rustc | --version | 17.2 s | 7 ms | 0 |
| └build_script parking_lot_core | 21.1 s | 1 ms | 0 | |
| └build_script thiserror | 21.1 s | 28 ms | 0 | |
| └rustc /usr/local/bin/rustc | --edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-bf0fafdea055103f/out/probe build/probe.rs --target x86_64-unknown-linux-gnu | 21.1 s | 25 ms | 256 |
| └build_script mime_guess | 21.4 s | 7 ms | 0 | |
| └build_script rustversion | 23.2 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 23.2 s | 7 ms | 0 |
| └build_script zerocopy | 26.0 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 26.0 s | 7 ms | 0 |
| └build_script ring | 35.2 s | 1.6 s | 0 | |
| └toolchain /usr/bin/cc ×2 | -E /work/target/debug/build/ring-33e4a446d5e81de3/out/8048722017408667746detect_compiler_family.c | 35.2 s | 23 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 | -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-33e4a446d5e81de3/out/8048722017408667746detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 8048722017408667746detect_compiler_family.c -dumpbase-ext .c | 35.2 s | 20 ms | 0 |
| └toolchain /usr/bin/cc ×2 | -? | 35.3 s | 2 ms | 256 |
| └toolchain /usr/bin/cc ×32 | -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/ring-33e4a446d5e81de3/out/flag_check -c /work/target/debug/build/ring-33e4a446d5e81de3/out/flag_check.c | 35.3 s | 36 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 | -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-33e4a446d5e81de3/out/flag_check.c -quiet -dumpdir /work/target/debug/build/ring-33e4a446d5e81de3/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccrJiOj7.s | 35.3 s | 24 ms | 0 |
| └toolchain /usr/bin/as | --64 -o /work/target/debug/build/ring-33e4a446d5e81de3/out/flag_check /tmp/ccrJiOj7.s | 35.3 s | 10 ms | 0 |
| └toolchain /usr/bin/ar ×4 | cqD /work/target/debug/build/ring-33e4a446d5e81de3/out/libring_core_0_17_14_.a /work/target/debug/build/ring-33e4a446d5e81de3/out/b9fed4bd5e786284-curve25519.o /work/target/debug/build/ring-33e4a446d5e81de3/out/2b18790154092d07-aes_nohw.o /work/target/debug/build/ring-33e4a446d5e81de3/out/20d6a080d7761227-montgomery.o /work/target/debug/build/ring-33e4a446d5e81de3/out/20d6a080d7761227-montgomery_inv.o /work/target/debug/build/ring-33e4a446d5e81de3/out/abdfa25550f18ac7-ecp_nistz.o /work/target/debug/build/ring-33e4a446d5e81de3/out/abdfa25550f18ac7-gfp_p256.o /work/target/debug/build/ring-33e4a446d5e81de3/out/abdfa25550f18ac7-gfp_p384.o /work/target/debug/build/ring-33e4a446d5e81de3/out/abdfa25550f18ac7-p256.o /work/target/debug/build/ring-33e4a446d5e81de3/out/9fa4cd275cb9daeb-limbs.o /work/target/debug/build/ring-33e4a446d5e81de3/out/8948ea8e62ee340e-mem.o /work/target/debug/build/ring-33e4a446d5e81de3/out/e288d65bf9bc9ef0-poly1305.o /work/target/debug/build/ring-33e4a446d5e81de3/out/8948ea8e62ee340e-crypt | 36.7 s | 17 ms | 0 |
| └build_script curve25519-dalek | 45.9 s | 17 ms | 0 | |
| └rustc /usr/local/bin/rustc ×2 | -vV | 45.9 s | 7 ms | 0 |
| └build_script zmij | 49.1 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 49.1 s | 7 ms | 0 |
| └build_script httparse | 57.6 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 57.6 s | 7 ms | 0 |
| └build_script serde_json | 59.4 s | 2 ms | 0 | |
| └build_script anyhow | 59.4 s | 35 ms | 0 | |
| └rustc /usr/local/bin/rustc | --cfg=anyhow_build_probe --edition=2018 --crate-name=anyhow --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/anyhow-16c5e2ddec703063/out/probe src/nightly.rs --target x86_64-unknown-linux-gnu | 59.4 s | 24 ms | 256 |
| └rustc /usr/local/bin/rustc | --version | 59.5 s | 7 ms | 0 |
| └build_script rustls | 59.6 s | 2 ms | 0 | |
| └build_script hush-secrets | 1 min 3 s | 1 ms | 0 | |
| └unknown ×3 | 1 min 3 s | 0 ms | 32512 |
Network 0
No network activity.
Files 0
Secrets opened
None.
Written outside the build directories
None.
Scratch disk 0
- Files
- 1688
- Directories
- 338
- Size
- 468.6 MiB
- Compiled units
- 279
Nothing outside the build areas.
Output
Standard error
Compiling proc-macro2 v1.0.107
Compiling unicode-ident v1.0.27
Compiling quote v1.0.47
Compiling syn v2.0.119
Compiling libc v0.2.191
Checking cfg-if v1.0.5
Compiling zeroize_derive v1.5.0
Compiling syn v3.0.9
Checking zeroize v1.9.1
Checking typenum v1.20.1
Checking getrandom v0.2.17
Checking rand_core v0.6.4
Compiling version_check v0.9.5
Compiling generic-array v0.14.7
Checking subtle v2.6.1
Checking crypto-common v0.1.7
Compiling displaydoc v0.2.7
Compiling serde_core v1.0.229
Compiling serde v1.0.229
Compiling serde_derive v1.0.229
Checking block-buffer v0.10.4
Checking cpufeatures v0.2.17
Checking digest v0.10.7
Compiling tinystr v0.8.5
Compiling thiserror v2.0.21
Compiling hybrid-array v0.4.15
Compiling unic-langid-impl v0.9.6
Compiling thiserror-impl v2.0.21
Checking memchr v2.8.3
Compiling unic-langid v0.9.6
Checking inout v0.1.4
Checking cipher v0.4.4
Compiling block-buffer v0.12.1
Compiling crypto-common v0.2.2
Compiling unicase v2.10.0
Compiling const-oid v0.10.2
Compiling digest v0.11.3
Compiling mime_guess v2.0.5
Checking hmac v0.12.1
Compiling same-file v1.0.6
Compiling thiserror v1.0.69
Compiling parking_lot_core v0.9.12
Compiling cpufeatures v0.3.1
Compiling sha2 v0.11.1
Compiling walkdir v2.5.0
Checking universal-hash v0.5.1
Compiling thiserror-impl v1.0.69
Checking opaque-debug v0.3.1
Compiling mime v0.3.17
Compiling find-msvc-tools v0.1.15
Checking const-oid v0.9.6
Compiling shlex v2.0.1
Compiling rustversion v1.0.23
Compiling cc v1.10.0
Checking der v0.7.10
Compiling rust-embed-utils v8.13.0
Checking ff v0.13.1
Checking base16ct v0.2.0
Compiling zerocopy v0.8.63
Compiling rustc-hash v2.1.3
Compiling smallvec v1.16.4
Checking futures-sink v0.3.34
Checking futures-core v0.3.34
Checking futures-channel v0.3.34
Compiling type-map v0.5.1
Checking sec1 v0.7.3
Checking group v0.13.0
Compiling rust-embed-impl v8.13.0
Compiling ring v0.17.14
Checking hkdf v0.12.4
Compiling basic-toml v0.1.10
Compiling toml v0.5.11
Checking crypto-bigint v0.5.5
Compiling futures-macro v0.3.34
Checking futures-io v0.3.34
Checking pin-project-lite v0.2.17
Compiling log v0.4.34
Checking futures-task v0.3.34
Checking slab v0.4.12
Compiling semver v1.0.28
Compiling rustc_version v0.4.1
Checking futures-util v0.3.34
Compiling i18n-config v0.4.8
Compiling fluent-syntax v0.12.0
Checking elliptic-curve v0.13.8
Compiling find-crate v0.6.3
Compiling intl-memoizer v0.5.3
Checking polyval v0.6.2
Compiling intl_pluralrules v7.0.2
Compiling fluent-langneg v0.13.1
Checking aead v0.5.2
Compiling self_cell v1.3.0
Compiling scopeguard v1.2.0
Compiling lock_api v0.4.14
Compiling fluent-bundle v0.16.0
Checking ghash v0.5.1
Checking ppv-lite86 v0.2.21
Compiling i18n-embed-impl v0.8.4
Checking primeorder v0.13.6
Checking futures-executor v0.3.34
Compiling curve25519-dalek v4.1.3
Checking poly1305 v0.8.0
Checking chacha20 v0.9.1
Checking ctr v0.9.2
Checking aes v0.8.4
Checking sha2 v0.10.9
Checking rustls-pki-types v1.15.1
Checking utf8parse v0.2.2
Checking untrusted v0.9.0
Checking anstyle-parse v1.0.0
Checking aes-gcm v0.10.3
Checking chacha20poly1305 v0.10.1
Checking futures v0.3.34
Checking p256 v0.13.2
Checking rand_chacha v0.3.1
Compiling parking_lot v0.12.5
Compiling fluent v0.17.0
Compiling arc-swap v1.9.3
Compiling rust-embed v8.13.0
Compiling curve25519-dalek-derive v0.1.1
Compiling proc-macro-error-attr3 v3.1.1
Checking time-core v0.1.9
Checking keccak v0.1.6
Checking colorchoice v1.0.5
Checking num-conv v0.2.2
Compiling zmij v1.0.23
Checking anstyle-query v1.1.5
Checking is_terminal_polyfill v1.70.2
Checking anstyle v1.0.14
Checking powerfmt v0.2.1
Checking deranged v0.5.9
Checking time v0.3.55
Checking anstream v1.0.0
Checking sha3 v0.10.9
Compiling proc-macro-error3 v3.1.1
Compiling i18n-embed v0.16.0
Checking rand v0.8.8
Checking hpke v0.12.0
Checking cookie-factory v0.3.3
Checking pbkdf2 v0.12.2
Checking salsa20 v0.10.2
Checking nom v8.0.0
Checking kem v0.3.0-pre.0
Checking hybrid-array v0.2.3
Checking secrecy v0.10.3
Compiling pin-project-internal v1.1.13
Checking base64 v0.22.1
Compiling heck v0.5.0
Checking strsim v0.11.1
Compiling rustls v0.23.46
Checking io_tee v0.1.1
Compiling anyhow v1.0.104
Compiling serde_json v1.0.154
Checking bech32 v0.11.1
Checking clap_lex v1.1.1
Checking base64 v0.23.1
Compiling httparse v1.10.1
Checking pem v4.0.0
Checking clap_builder v4.6.7
Checking age-core v0.12.0
Compiling i18n-embed-fl v0.10.1
Compiling clap_derive v4.6.7
Checking pin-project v1.1.13
Checking ml-kem v0.2.3
Checking scrypt v0.11.0
Checking x25519-dalek v2.0.1
Checking yasna v0.6.0
Checking rustls-webpki v0.103.16
Checking rtoolbox v0.0.6
Checking lazy_static v1.5.1
Checking once_cell v1.21.4
Compiling hush-secrets v0.1.28
Checking openssl-probe v0.2.2
Checking itoa v1.0.18
Checking rustls-native-certs v0.8.5
Checking age v0.12.1
Checking rpassword v7.5.4
Checking rcgen v0.14.10
Checking clap v4.6.7
Checking crateward-probe v0.0.0 (/cw/probe)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 1m 07s
Timeline
6
| When | From | To | Event | Worker |
|---|---|---|---|---|
| 2026-10-27 03:06 UTC | Discovered | Fetched | fetched | fetcher-12688 |
| 2026-10-27 03:06 UTC | Fetched | ReadyForSandbox | static_analysis_completed | static-12726 |
| 2026-10-27 03:06 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-12760-slot1 |
| 2026-10-27 03:07 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-12760-slot1 |
| 2026-10-27 03:07 UTC | DynamicallyAnalyzed | Scored | scored | analyzer-12816 |
| 2026-10-27 03:07 UTC | Scored | Done | finalized | analyzer-12816 |