regorus 0.14.0
medium severity process_spawn in build_script code (2 places): std::process::Command::new
19
low
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.
Evidence
| Points | Signal | Where | What |
|---|---|---|---|
| 10 | static:process_spawn static · regorus | build.rs:26 | medium severity process_spawn in build_script code (2 places): std::process::Command::new |
| 2 | static:environment_enumeration static · regorus | src/builtins/opa.rs:46 | medium severity environment_enumeration in library code: std::env::vars |
| 2 | static:included_binary static · regorus | tests/rvm/compiler.rs:595 | medium severity included_binary in test code: tests/rvm/fixtures/host_await_registered_raw_e39a1d16.rvm (322 bytes) |
| 2 | static:obfuscated_data static · regorus | src/builtins/strings/go_is_print.rs:9 | medium severity obfuscated_data in library code (2 places): array of 412 integer literals |
| 2 | static:yara:embedded_macho_executable static · regorus | bindings/go/regorus_test | medium severity yara:embedded_macho_executable in library code: A Mach-O executable shipped inside the crate |
| 1 | static:build_script static · regorus | build.rs | low severity build_script in build_script code: build.rs |
Behavior
New since the previous version
static:included_binary
Profile
static:environment_enumeration static:included_binary static:obfuscated_data static:process_spawn static:yara:embedded_macho_executable
Static findings
10 groups
medium obfuscated_data library 2
array of 412 integer literalssrc/builtins/strings/go_is_print.rs:9array of 566 integer literalssrc/builtins/strings/go_is_print.rs:61
medium environment_enumeration library 1
std::env::varssrc/builtins/opa.rs:46
medium included_binary test 1
tests/rvm/fixtures/host_await_registered_raw_e39a1d16.rvm (322 bytes)tests/rvm/compiler.rs:595
medium process_spawn build_script 1
std::process::Command::newbuild.rs:26
medium yara_match embedded_macho_executable library 1
A Mach-O executable shipped inside the cratebindings/go/regorus_test
low build_script build_script 1
build.rsbuild.rs
low process_spawn test 1
std::process::Command::newtests/opa.rs:699
info url_literal library 7
http://src/builtins/azure_policy/template_functions_encoding.rs:222https://src/builtins/azure_policy/template_functions_encoding.rs:222://src/builtins/azure_policy/template_functions_encoding.rs:232https://non-existent?src/builtins/encoding.rs:221 src/builtins/encoding.rs:249https://non-existentsrc/builtins/encoding.rs:279 src/builtins/encoding.rs:304
info unsafe_code test 1
1 unsafe blocks, functions or implstests/sarif_memory.rs:38
info url_literal test 1
https://github.com/open-policy-agent/opatests/opa.rs:19
Run: check
succeeded- Ended
- agent reported the end
- Guest
- exit code 0
- Run time
- 1 min 24 s
- VM restore
- 63 ms
- Payload
- 7595 files, 91.1 MiB
- Files opened
- 18454
Processes 333
Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.
| Process | Arguments | Start | Took | Exit |
|---|---|---|---|---|
| cargo /usr/local/bin/cargo | check --locked --offline | 5 ms | 1 min 24 s | 0 |
| └rustc /usr/local/bin/rustc ×38 | --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --cfg feature="span-locations" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=c83ce984471a4e48 -C extra-filename=-5cb179a647ef6e51 --out-dir /work/target/debug/build/proc-macro2-5cb179a647ef6e51 -L dependency=/work/target/debug/deps --cap-lints allow | 306 ms | 691 ms | 0 |
| └toolchain /usr/bin/cc | -m64 /work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustcVBseoE/symbols.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.build_script_build.dfb9ac565abdb04-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.7zrad1clk47dffwz5ub8n8yx5.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libr | 849 ms | 145 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 | -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cclo38QS.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustcVBseoE/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L | 856 ms | 138 ms | 0 |
| └toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld | -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cclo38QS.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustcVBseoE/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 | 859 ms | 133 ms | 0 |
| └build_script proc-macro2 | 1.0 s | 84 ms | 0 | |
| └rustc /usr/local/bin/rustc ×3 | --version | 1.0 s | 7 ms | 0 |
| └rustc /usr/local/bin/rustc | --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-97392f29eb377993/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu | 1.0 s | 33 ms | 256 |
| └rustc /usr/local/bin/rustc ×131 | --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow | 1.0 s | 50 ms | 0 |
| └build_script quote | 1.2 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 1.2 s | 8 ms | 0 |
| └build_script num-traits | 7.9 s | 47 ms | 0 | |
| └rustc /usr/local/bin/rustc ×3 | --version --verbose | 7.9 s | 7 ms | 0 |
| └build_script serde_core | 8.9 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 8.9 s | 7 ms | 0 |
| └build_script libc | 9.6 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 9.6 s | 8 ms | 0 |
| └build_script serde | 13.5 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 13.5 s | 8 ms | 0 |
| └build_script typeid | 17.5 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 17.5 s | 7 ms | 0 |
| └build_script icu_normalizer_data | 24.2 s | 1 ms | 0 | |
| └build_script getrandom | 24.2 s | 2 ms | 0 | |
| └build_script icu_properties_data | 24.2 s | 1 ms | 0 | |
| └build_script zmij | 24.4 s | 17 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 24.4 s | 15 ms | 0 |
| └build_script zerocopy | 24.5 s | 22 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 24.5 s | 16 ms | 0 |
| └build_script parking_lot_core | 27.1 s | 1 ms | 0 | |
| └build_script ref-cast | 27.5 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 27.5 s | 7 ms | 0 |
| └build_script serde_json | 28.8 s | 1 ms | 0 | |
| └build_script ahash | 30.7 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --verbose --version | 30.7 s | 8 ms | 0 |
| └build_script anyhow | 41.4 s | 64 ms | 0 | |
| └rustc /usr/local/bin/rustc | --cfg=anyhow_build_probe --edition=2018 --crate-name=anyhow --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/anyhow-53d53971fb3aec2e/out/probe src/nightly.rs --target x86_64-unknown-linux-gnu | 41.4 s | 53 ms | 256 |
| └rustc /usr/local/bin/rustc | --version | 41.4 s | 7 ms | 0 |
| └build_script getrandom | 41.4 s | 1 ms | 0 | |
| └build_script verus_prettyplease | 41.5 s | 2 ms | 0 | |
| └build_script thiserror | 41.5 s | 45 ms | 0 | |
| └rustc /usr/local/bin/rustc | --edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-8658b25ef1050b90/out/probe build/probe.rs --target x86_64-unknown-linux-gnu | 41.5 s | 26 ms | 256 |
| └rustc /usr/local/bin/rustc | --version | 41.6 s | 14 ms | 0 |
| └build_script unicode-general-category | 48.6 s | 269 ms | 0 | |
| └build_script jsonschema-value | 48.9 s | 1 ms | 0 | |
| └build_script chrono-tz | 59.8 s | 1 ms | 0 | |
| └build_script vstd | 59.8 s | 2 ms | 0 | |
| └build_script anyhow | 59.8 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 59.8 s | 8 ms | 0 |
| └build_script msvc_spectre_libs | 1 min 0 s | 1 ms | 0 | |
| └build_script regorus | 1 min 18 s | 2 ms | 0 | |
| └unknown | 1 min 18 s | 0 ms | 32512 |
Network 0
No network activity.
Files 0
Secrets opened
None.
Written outside the build directories
None.
Scratch disk 0
- Files
- 1247
- Directories
- 296
- Size
- 522.6 MiB
- Compiled units
- 166
- Scan
- stopped at a limit
Nothing outside the build areas.
Output
Standard error
Compiling proc-macro2 v1.0.107
Compiling unicode-ident v1.0.27
Compiling quote v1.0.47
Compiling syn v3.0.9
Compiling synstructure v0.14.0
Compiling autocfg v1.5.1
Compiling num-traits v0.2.19
Compiling zerofrom-derive v0.1.8
Checking zerofrom v0.1.8
Compiling yoke-derive v0.8.4
Compiling serde_core v1.0.229
Checking stable_deref_trait v1.2.1
Checking yoke v0.8.4
Compiling libc v0.2.191
Compiling zerovec-derive v0.11.7
Checking cfg-if v1.0.5
Checking zerovec v0.11.9
Compiling displaydoc v0.2.7
Compiling serde v1.0.229
Compiling serde_derive v1.0.229
Checking num-integer v0.1.47
Checking smallvec v1.16.4
Checking tinystr v0.8.5
Checking writeable v0.6.4
Compiling typeid v1.0.3
Checking litemap v0.8.3
Checking icu_locale_core v2.4.0
Checking zerotrie v0.2.5
Checking potential_utf v0.1.6
Compiling ohno_macros_impl v0.5.3
Compiling syn v2.0.119
Compiling version_check v0.9.5
Compiling zerocopy v0.8.63
Compiling zmij v1.0.23
Checking utf8_iter v1.0.4
Compiling icu_properties_data v2.4.0
Compiling getrandom v0.3.4
Checking regex-syntax v0.8.11
Compiling icu_normalizer_data v2.4.0
Checking icu_collections v2.4.0
Compiling ahash v0.8.12
Compiling ohno_macros v0.5.3
Checking icu_provider v2.4.0
Checking num-bigint v0.4.8
Checking aho-corasick v1.1.5
Checking foldhash v0.2.0
Compiling find-msvc-tools v0.1.15
Compiling serde_json v1.0.154
Compiling shlex v2.0.1
Compiling ref-cast v1.0.27
Checking equivalent v1.0.3
Checking itoa v1.0.18
Checking allocator-api2 v0.2.21
Compiling parking_lot_core v0.9.12
Checking hashbrown v0.17.1
Compiling cc v1.10.0
Checking regex-automata v0.4.18
Checking num-rational v0.4.2
Compiling ohno v0.5.3
Checking num-iter v0.1.46
Checking num-complex v0.4.6
Compiling ref-cast-impl v1.0.27
Compiling verus_syn v0.0.0-2026-09-06-0133
Checking once_cell v1.21.4
Compiling thiserror v2.0.21
Checking rand_core v0.10.1
Compiling verus_prettyplease v0.0.0-2026-09-06-0133
Checking percent-encoding v2.3.2
Checking scopeguard v1.2.0
Compiling getrandom v0.4.3
Compiling anyhow v1.0.104
Checking lock_api v0.4.14
Checking num v0.4.3
Checking icu_normalizer v2.4.0
Checking icu_properties v2.4.0
Compiling msvc_spectre_libs_build v0.1.2
Compiling thiserror-impl v2.0.21
Checking bit-vec v0.8.0
Compiling jsonschema-value v0.58.6
Compiling unicode-general-category v1.1.0
Checking borrow-or-share v0.2.4
Checking siphasher v1.0.4
Compiling heck v0.5.0
Checking cpufeatures v0.3.1
Checking chacha20 v0.10.2
Compiling strum_macros v0.28.0
Compiling indexmap v2.14.2
Checking phf_shared v0.12.1
Checking fluent-uri v0.4.1
Checking bit-set v0.8.0
Checking parking_lot v0.12.5
Compiling msvc_spectre_libs v0.2.2
Checking idna_adapter v1.2.2
Checking fraction v0.17.0
Compiling synstructure v0.13.2
Compiling vstd v0.0.0-2026-09-06-0133
Compiling chrono-tz v0.10.4
Compiling convert_case v0.4.0
Checking micromap v0.3.0
Checking outref v0.5.2
Checking num-cmp v0.1.0
Checking vsimd v0.8.0
Checking iana-time-zone v0.1.65
Checking bytecount v0.6.9
Checking chrono v0.4.45
Checking uuid-simd v0.8.0
Checking referencing v0.58.6
Compiling verus_builtin_macros v0.0.0-2026-09-06-0133
Compiling regorus v0.14.0
Checking rand v0.10.3
Checking idna v1.1.0
Checking cobs v0.3.0
Checking fancy-regex v0.19.2
Checking phf v0.12.1
Compiling verus_state_machines_macros v0.0.0-2026-09-06-0133
Checking strum v0.28.0
Checking form_urlencoded v1.2.2
Checking regex v1.13.1
Checking jsonschema-regex v0.58.6
Checking email_address v0.2.9
Checking bstr v1.13.1
Checking verus_builtin v0.0.0-2026-09-06-0133
Checking libyaml-rs v0.3.0
Checking data-encoding v2.11.1
Checking ryu v1.0.23
Checking yaml_serde v0.10.7
Checking jsonschema v0.58.6
Checking globset v0.4.20
Checking url v2.5.8
Checking postcard v1.1.3
Checking uuid v1.29.0
Checking num-bigint v0.5.1
Checking lru v0.18.5
Checking ipnet v2.12.2
Checking semver v1.0.28
Checking lazy_static v1.5.1
Checking spin v0.12.3
Checking crateward-probe v0.0.0 (/cw/probe)
Finished `dev` profile [unoptimized + debuginfo] target(s) in 1m 24s
Timeline
6
| When | From | To | Event | Worker |
|---|---|---|---|---|
| 2026-10-27 18:05 UTC | Discovered | Fetched | fetched | fetcher-12688 |
| 2026-10-27 18:05 UTC | Fetched | ReadyForSandbox | static_analysis_completed | static-12726 |
| 2026-10-27 18:07 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-12760-slot2 |
| 2026-10-27 18:09 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-12760-slot2 |
| 2026-10-27 18:09 UTC | DynamicallyAnalyzed | Scored | scored | analyzer-12816 |
| 2026-10-27 18:09 UTC | Scored | Done | finalized | analyzer-12816 |