Crateward

holon 0.55.0

Done dynamic on Linux job 299613 crates.io SBOM Findings (VEX)

medium severity process_spawn in build_script code (69 places): std::process::Command::new

19
low
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
10static:process_spawn
static · holon
build.rs:9medium severity process_spawn in build_script code (69 places): std::process::Command::new
2static:obfuscated_data
static · holon
src/oidc.rs:586medium severity obfuscated_data in library code (2 places): eyJhbGciOiJSUzI1NiIsImtpZCI6InRlc3Qta2V5IiwidHlwIjoiSldUIn0.eyJpc3MiOiJodHRwczovL2lzc3Vlci5leGFtcGxlIiwic3ViIjoidXNlci0xIiwiYXVkIjoiY2xpZW50LWlkIiwiZXhwIjo0MTAyNDQ0ODAwLCJpYXQiOjE3MDAwMDAwMDB9.DInTkMD…
2static:secret_environment_variable
static · holon
src/agent_template.rs:39medium severity secret_environment_variable in library code (31 places): GITHUB_TOKEN
2static:shell_command
static · holon
src/tool/helpers.rs:587medium severity shell_command in library code (2 places): bash -c
2static:yara:invisible_characters
static · holon
src/tool/apply_patch.rs:3126medium severity yara:invisible_characters in library code: Zero width or invisible characters, which can hide identifiers or payloads
1static:build_script
static · holon
build.rslow severity build_script in build_script code: build.rs

Behavior

Profile

static:obfuscated_data static:process_spawn static:secret_environment_variable static:shell_command static:yara:invisible_characters

Static findings

18 groups, 382 more dropped by the analysis limit
medium secret_environment_variable library 27
medium secret_environment_variable test 4
medium obfuscated_data library 2
  • eyJhbGciOiJSUzI1NiIsImtpZCI6InRlc3Qta2V5IiwidHlwIjoiSldUIn0.eyJpc3MiOiJodHRwczovL2lzc3Vlci5leGFtcGxlIiwic3ViIjoidXNlci0xIiwiYXVkIjoiY2xpZW50LWlkIiwiZXhwIjo0MTAyNDQ0ODAwLCJpYXQiOjE3MDAwMDAwMDB9.DInTkMD… src/oidc.rs:586
  • tB64pcpgi1oFG8JlacqqFcXtG2YYzAQxhRJbTwOZhf101qwsyjt89NE_u2RV8jKp9jjpsKizK-FMKEEZ5EPpGHEF4Y63djA1MJ3pNp3dY9tzK3ZvfEUSApDEgVvok_zXqiRok_CntIpcCJDaPF2GOULOHrBEeEZq4h0P7uQqxrgOaCv-R_jW1ycRynYmneLhCHlOEKYz… src/oidc.rs:588
medium process_spawn build_script 2
medium shell_command library 2
medium yara_match invisible_characters library 1
low network_access library 458
low network_access test 408
low process_spawn library 36
low process_spawn test 24
low network_access binary 7
low process_spawn binary 7
low foreign_functions library 2
low build_script build_script 1
info url_literal library 972
info url_literal binary 37
info unsafe_code library 6
info unsafe_code binary 4

Run: check

failed
Ended
agent reported the end
Guest
exit code 101
Run time
1 min 36 s
VM restore
60 ms
Payload
27023 files, 509.4 MiB
Files opened
33783

Processes 607

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 5 ms 1 min 36 s 25856
└rustc /usr/local/bin/rustc ×38 --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow 586 ms 699 ms 0
└toolchain /usr/bin/cc -m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcmEVt16/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib 1.1 s 143 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc1ZXYix.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcmEVt16/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L 1.1 s 136 ms 0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc1ZXYix.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcmEVt16/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 1.1 s 133 ms 0
└build_script proc-macro2 1.2 s 85 ms 0
└rustc /usr/local/bin/rustc ×3 --version 1.2 s 7 ms 0
└rustc /usr/local/bin/rustc --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu 1.3 s 33 ms 256
└rustc /usr/local/bin/rustc ×171 --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow 1.4 s 51 ms 0
└build_script quote 2.1 s 10 ms 0
└rustc /usr/local/bin/rustc --version 2.1 s 8 ms 0
└build_script libc 6.7 s 10 ms 0
└rustc /usr/local/bin/rustc --version 6.7 s 7 ms 0
└build_script libc 12.5 s 9 ms 0
└rustc /usr/local/bin/rustc --version 12.5 s 6 ms 0
└build_script serde_core 16.2 s 10 ms 0
└rustc /usr/local/bin/rustc --version 16.2 s 7 ms 0
└build_script parking_lot_core 17.8 s 2 ms 0
└build_script generic-array 26.3 s 27 ms 0
└rustc /usr/local/bin/rustc ×3 --verbose --version 26.3 s 7 ms 0
└build_script libm 34.6 s 2 ms 0
└build_script httparse 34.6 s 10 ms 0
└rustc /usr/local/bin/rustc --version 34.6 s 7 ms 0
└build_script serde 34.6 s 9 ms 0
└rustc /usr/local/bin/rustc --version 34.6 s 7 ms 0
└build_script crc32fast 38.5 s 10 ms 0
└rustc /usr/local/bin/rustc --version 38.6 s 7 ms 0
└build_script num-traits 39.1 s 47 ms 0
└rustc /usr/local/bin/rustc ×3 --version --verbose 39.1 s 7 ms 0
└build_script icu_normalizer_data 40.9 s 2 ms 0
└build_script icu_properties_data 41.0 s 1 ms 0
└build_script zmij 43.9 s 10 ms 0
└rustc /usr/local/bin/rustc --version 43.9 s 7 ms 0
└build_script ring 44.0 s 1.5 s 0
└toolchain /usr/bin/cc ×2 -E /work/target/debug/build/ring-89b26f3c111c6d71/out/14848798909779170074detect_compiler_family.c 44.0 s 22 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-89b26f3c111c6d71/out/14848798909779170074detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 14848798909779170074detect_compiler_family.c -dumpbase-ext .c 44.0 s 20 ms 0
└toolchain /usr/bin/cc ×2 -? 44.0 s 3 ms 256
└toolchain /usr/bin/cc ×32 -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/ring-89b26f3c111c6d71/out/flag_check -c /work/target/debug/build/ring-89b26f3c111c6d71/out/flag_check.c 44.0 s 33 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-89b26f3c111c6d71/out/flag_check.c -quiet -dumpdir /work/target/debug/build/ring-89b26f3c111c6d71/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccjNUM7s.s 44.0 s 24 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/ring-89b26f3c111c6d71/out/flag_check /tmp/ccjNUM7s.s 44.0 s 6 ms 0
└toolchain /usr/bin/ar ×4 cqD /work/target/debug/build/ring-89b26f3c111c6d71/out/libring_core_0_17_14_.a /work/target/debug/build/ring-89b26f3c111c6d71/out/b9fed4bd5e786284-curve25519.o /work/target/debug/build/ring-89b26f3c111c6d71/out/2b18790154092d07-aes_nohw.o /work/target/debug/build/ring-89b26f3c111c6d71/out/20d6a080d7761227-montgomery.o /work/target/debug/build/ring-89b26f3c111c6d71/out/20d6a080d7761227-montgomery_inv.o /work/target/debug/build/ring-89b26f3c111c6d71/out/abdfa25550f18ac7-ecp_nistz.o /work/target/debug/build/ring-89b26f3c111c6d71/out/abdfa25550f18ac7-gfp_p256.o /work/target/debug/build/ring-89b26f3c111c6d71/out/abdfa25550f18ac7-gfp_p384.o /work/target/debug/build/ring-89b26f3c111c6d71/out/abdfa25550f18ac7-p256.o /work/target/debug/build/ring-89b26f3c111c6d71/out/9fa4cd275cb9daeb-limbs.o /work/target/debug/build/ring-89b26f3c111c6d71/out/8948ea8e62ee340e-mem.o /work/target/debug/build/ring-89b26f3c111c6d71/out/e288d65bf9bc9ef0-poly1305.o /work/target/debug/build/ring-89b26f3c111c6d71/out/8948ea8e62ee340e-crypt 45.4 s 15 ms 0
└build_script zerocopy 47.8 s 10 ms 0
└rustc /usr/local/bin/rustc --version 47.8 s 7 ms 0
└build_script serde_json 47.8 s 2 ms 0
└build_script rustversion 52.6 s 11 ms 0
└rustc /usr/local/bin/rustc --version 52.6 s 8 ms 0
└build_script thiserror 52.6 s 32 ms 0
└rustc /usr/local/bin/rustc --edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-2a2ace9117c7add0/out/probe build/probe.rs --target x86_64-unknown-linux-gnu 52.6 s 19 ms 256
└rustc /usr/local/bin/rustc --version 52.6 s 7 ms 0
└build_script clang-sys 58.6 s 2 ms 0
└build_script rustls 1 min 6 s 2 ms 0
└build_script bindgen 1 min 7 s 3 ms 0
└build_script getrandom 1 min 27 s 2 ms 0
└build_script zstd-sys 1 min 27 s 8.0 s 0
└toolchain /usr/bin/cc -E /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/615697970288257555detect_compiler_family.c 1 min 27 s 15 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/615697970288257555detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 615697970288257555detect_compiler_family.c -dumpbase-ext .c 1 min 27 s 13 ms 0
└toolchain /usr/bin/cc -? 1 min 27 s 2 ms 256
└toolchain /usr/bin/cc ×41 -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/flag_check -c /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/flag_check.c 1 min 27 s 27 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/flag_check.c -quiet -dumpdir /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/cci0SSMJ.s 1 min 27 s 24 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/flag_check /tmp/cci0SSMJ.s 1 min 27 s 1 ms 0
└toolchain /usr/bin/ar ×2 cqD /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/libzstd.a /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-debug.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-entropy_common.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-error_private.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-fse_decompress.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-pool.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-threading.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/4f97f2375d6aa471-zstd_common.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/7c9960efb53c0b35-fse_compress.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/7c9960efb53c0b35-hist.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/7c9960efb53c0b35-huf_compress.o /work/target/debug/build/zstd-sys-8d1f39bd19ff6ca7/out/7c9960efb53c0b35-zstd_compress.o /work/target/de 1 min 35 s 48 ms 0
└build_script btls-sys 1 min 36 s 251 ms 256
└unknown 1 min 36 s 0 ms 32512

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
2999
Directories
828
Size
628.6 MiB
Compiled units
221
Scan
stopped at a limit

Nothing outside the build areas.

Output

Standard error
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.27
    Checking cfg-if v1.0.5
   Compiling syn v2.0.119
   Compiling libc v0.2.191
   Compiling syn v3.0.9
   Compiling zeroize_derive v1.5.0
    Checking smallvec v1.16.4
    Checking zeroize v1.9.1
   Compiling jobserver v0.1.35
   Compiling find-msvc-tools v0.1.15
   Compiling shlex v2.0.1
   Compiling cc v1.10.0
    Checking log v0.4.34
   Compiling serde_core v1.0.229
    Checking scopeguard v1.2.0
   Compiling parking_lot_core v0.9.12
    Checking errno v0.3.14
    Checking pin-project-lite v0.2.17
    Checking signal-hook-registry v1.4.8
    Checking lock_api v0.4.14
    Checking itoa v1.0.18
   Compiling version_check v0.9.5
    Checking subtle v2.6.1
    Checking once_cell v1.21.4
    Checking parking_lot v0.12.5
    Checking mio v1.2.4
    Checking getrandom v0.2.17
    Checking typenum v1.20.1
   Compiling tokio-macros v2.7.2
   Compiling synstructure v0.14.0
    Checking socket2 v0.6.5
    Checking tokio v1.54.1
    Checking bitflags v2.13.2
   Compiling zerofrom-derive v0.1.8
    Checking memchr v2.8.3
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling generic-array v0.14.9
    Checking futures-sink v0.3.34
    Checking equivalent v1.0.3
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.4
    Checking http v1.5.0
    Checking const-oid v0.9.6
    Checking foldhash v0.2.0
    Checking hashbrown v0.17.1
    Checking tracing-core v0.1.36
   Compiling zerovec-derive v0.11.7
    Checking slab v0.4.12
    Checking zerovec v0.11.9
   Compiling displaydoc v0.2.7
   Compiling tracing-attributes v0.1.31
    Checking tracing v0.1.44
    Checking indexmap v2.14.2
    Checking http-body v1.1.0
    Checking tokio-util v0.7.20
   Compiling autocfg v1.5.1
   Compiling serde v1.0.229
    Checking fnv v1.0.7
   Compiling httparse v1.10.1
    Checking atomic-waker v1.1.2
    Checking futures-io v0.3.34
    Checking simd-adler32 v0.3.10
   Compiling libm v0.2.16
    Checking futures-task v0.3.34
    Checking futures-util v0.3.34
   Compiling num-traits v0.2.19
    Checking tinystr v0.8.5
    Checking crypto-common v0.1.6
    Checking block-buffer v0.10.4
    Checking rand_core v0.6.4
   Compiling serde_derive v1.0.229
    Checking percent-encoding v2.3.2
    Checking try-lock v0.2.5
    Checking adler2 v2.0.1
   Compiling crc32fast v1.5.3
    Checking litemap v0.8.3
    Checking writeable v0.6.4
    Checking icu_locale_core v2.4.0
    Checking want v0.3.2
    Checking digest v0.10.7
    Checking zerotrie v0.2.5
    Checking potential_utf v0.1.6
    Checking futures-channel v0.3.34
   Compiling icu_properties_data v2.4.0
    Checking base64ct v1.8.3
   Compiling icu_normalizer_data v2.4.0
    Checking tower-service v0.3.3
    Checking utf8_iter v1.0.4
    Checking icu_collections v2.4.0
    Checking pem-rfc7468 v0.7.0
    Checking icu_provider v2.4.0
    Checking miniz_oxide v0.9.1
    Checking rustls-pki-types v1.15.1
    Checking flate2 v1.1.10
    Checking der v0.7.10
    Checking form_urlencoded v1.2.2
    Checking sync_wrapper v1.0.2
   Compiling ring v0.17.14
    Checking tower-layer v0.3.3
   Compiling zmij v1.0.23
    Checking icu_normalizer v2.4.0
    Checking spki v0.7.3
    Checking icu_properties v2.4.0
    Checking http-body-util v0.1.5
   Compiling serde_json v1.0.154
   Compiling zerocopy v0.8.63
    Checking ipnet v2.12.2
   Compiling glob v0.3.4
   Compiling clang-sys v1.9.1
    Checking idna_adapter v1.2.2
    Checking pkcs8 v0.10.2
    Checking tower v0.5.3
    Checking h2 v0.4.20
    Checking untrusted v0.9.0
   Compiling pkg-config v0.3.34
    Checking compression-core v0.4.34
    Checking httpdate v1.0.3
   Compiling thiserror v2.0.21
    Checking ryu v1.0.23
   Compiling rustversion v1.0.23
    Checking hyper v1.12.0
    Checking compression-codecs v0.4.46
    Checking idna v1.1.0
   Compiling thiserror-impl v2.0.21
   Compiling rustls v0.23.46
    Checking base64 v0.23.1
   Compiling minimal-lexical v0.2.1
   Compiling regex-syntax v0.8.11
   Compiling nom v7.1.3
   Compiling regex-automata v0.4.18
    Checking hyper-util v0.1.21
    Checking url v2.5.8
    Checking rustls-webpki v0.103.16
    Checking async-compression v0.4.51
   Compiling libloading v0.8.9
   Compiling either v1.19.0
   Compiling bindgen v0.72.1
   Compiling itertools v0.13.0
    Checking tower-http v0.6.11
   Compiling regex v1.13.1
   Compiling cexpr v0.6.0
    Checking serde_urlencoded v0.7.1
    Checking hmac v0.12.1
   Compiling shlex v1.3.0
   Compiling rustc-hash v2.1.3
    Checking base64 v0.22.1
   Compiling hybrid-array v0.4.15
    Checking tokio-rustls v0.26.6
    Checking webpki-roots v1.0.11
    Checking signature v2.2.0
    Checking ff v0.13.1
   Compiling cmake v0.1.58
   Compiling fslock v0.2.1
   Compiling fs_extra v1.3.0
    Checking base16ct v0.2.0
    Checking sec1 v0.7.3
   Compiling btls-sys v0.5.6
    Checking group v0.13.0
    Checking hyper-rustls v0.27.10
    Checking hkdf v0.12.4
   Compiling zstd-sys v2.1.2+zstd.1.5.7
    Checking num-integer v0.1.47
    Checking crypto-bigint v0.5.5
   Compiling async-trait v0.1.92
   Compiling semver v1.0.28
   Compiling getrandom v0.4.3
    Checking spin v0.9.9
   Compiling unicase v2.10.0
    Checking siphasher v1.0.4
    Checking cpufeatures v0.2.17
    Checking rand_core v0.10.1
    Checking cpufeatures v0.3.1
   Compiling mime_guess v2.0.5
    Checking lazy_static v1.5.1
   Compiling rustc_version v0.4.1
    Checking elliptic-curve v0.13.8
    Checking reqwest v0.12.28
error: btls-sys@0.5.6: can't run git: No such file or directory (os error 2)
error: btls-sys@0.5.6: cd "/work/target/debug/build/btls-sys-25346c016f28904b/out/boringssl" && "git" "init" failed
error: failed to run custom build command for `btls-sys v0.5.6`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/btls-sys-4627c47be29e6c9a/build-script-main` (exit status: 1)
  --- stdout
  cargo:rerun-if-env-changed=BORING_BSSL_PATH_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=BORING_BSSL_PATH_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_BORING_BSSL_PATH
  cargo:rerun-if-env-changed=BORING_BSSL_PATH
  cargo:rerun-if-env-changed=BORING_BSSL_INCLUDE_PATH_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=BORING_BSSL_INCLUDE_PATH_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_BORING_BSSL_INCLUDE_PATH
  cargo:rerun-if-env-changed=BORING_BSSL_INCLUDE_PATH
  cargo:rerun-if-env-changed=BORING_BSSL_SOURCE_PATH_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=BORING_BSSL_SOURCE_PATH_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_BORING_BSSL_SOURCE_PATH
  cargo:rerun-if-env-changed=BORING_BSSL_SOURCE_PATH
  cargo:rerun-if-env-changed=BORING_BSSL_ASSUME_PATCHED_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=BORING_BSSL_ASSUME_PATCHED_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_BORING_BSSL_ASSUME_PATCHED
  cargo:rerun-if-env-changed=BORING_BSSL_ASSUME_PATCHED
  cargo:rerun-if-env-changed=BORING_BSSL_SYSROOT_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=BORING_BSSL_SYSROOT_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_BORING_BSSL_SYSROOT
  cargo:rerun-if-env-changed=BORING_BSSL_SYSROOT
  cargo:rerun-if-env-changed=BORING_BSSL_COMPILER_EXTERNAL_TOOLCHAIN_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=BORING_BSSL_COMPILER_EXTERNAL_TOOLCHAIN_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_BORING_BSSL_COMPILER_EXTERNAL_TOOLCHAIN
  cargo:rerun-if-env-changed=BORING_BSSL_COMPILER_EXTERNAL_TOOLCHAIN
  cargo:rerun-if-env-changed=DEBUG_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=DEBUG_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_DEBUG
  cargo:rerun-if-env-changed=DEBUG
  cargo:rerun-if-env-changed=OPT_LEVEL_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=OPT_LEVEL_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_OPT_LEVEL
  cargo:rerun-if-env-changed=OPT_LEVEL
  cargo:rerun-if-env-changed=ANDROID_NDK_HOME_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=ANDROID_NDK_HOME_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_ANDROID_NDK_HOME
  cargo:rerun-if-env-changed=ANDROID_NDK_HOME
  cargo:rerun-if-env-changed=CMAKE_TOOLCHAIN_FILE_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=CMAKE_TOOLCHAIN_FILE_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_CMAKE_TOOLCHAIN_FILE
  cargo:rerun-if-env-changed=CMAKE_TOOLCHAIN_FILE
  cargo:rerun-if-env-changed=BORING_BSSL_RUST_CPPLIB_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=BORING_BSSL_RUST_CPPLIB_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_BORING_BSSL_RUST_CPPLIB
  cargo:rerun-if-env-changed=BORING_BSSL_RUST_CPPLIB
  cargo:rerun-if-env-changed=CC_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=CC_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_CC
  cargo:rerun-if-env-changed=CXX_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=CXX_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_CXX
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=BORING_BSSL_INSTALL_DIR_x86_64-unknown-linux-gnu
  cargo:rerun-if-env-changed=BORING_BSSL_INSTALL_DIR_x86_64_unknown_linux_gnu
  cargo:rerun-if-env-changed=HOST_BORING_BSSL_INSTALL_DIR
  cargo:rerun-if-env-changed=BORING_BSSL_INSTALL_DIR
  cargo::error=can't run git: No such file or directory (os error 2)
  cargo::error=cd "/work/target/debug/build/btls-sys-25346c016f28904b/out/boringssl" && "git" "init" failed

  --- stderr
  boring-sys failed: can't run git: No such file or directory (os error 2)
  cd "/work/target/debug/build/btls-sys-25346c016f28904b/out/boringssl" && "git" "init" failed

Timeline

6
WhenFromToEventWorker
2026-10-28 12:42 UTCDiscoveredFetchedfetchedfetcher-12688
2026-10-28 12:42 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-12726
2026-10-28 12:49 UTCReadyForSandboxRunningsandbox_startedorchestrator-12760-slot2
2026-10-28 12:51 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-12760-slot2
2026-10-28 12:51 UTCDynamicallyAnalyzedScoredscoredanalyzer-12816
2026-10-28 12:51 UTCScoredDonefinalizedanalyzer-12816