Crateward

faucet-cli 1.16.0

Done dynamic on Linux job 314739 crates.io SBOM Findings (VEX)

high severity exfiltration_endpoint in test code: https://hooks.slack.com/services/T0/B0/x

19
low
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
10static:exfiltration_endpoint
static · faucet-cli
tests/cli_end_to_end.rs:858high severity exfiltration_endpoint in test code: https://hooks.slack.com/services/T0/B0/x
2static:credential_access
static · faucet-cli
src/executor.rs:4218medium severity credential_access in library code: /home/svc/.ssh/authorized_keys
2static:environment_enumeration
static · faucet-cli
src/env_config.rs:407medium severity environment_enumeration in library code (2 places): std::env::vars_os
2static:secret_environment_variable
static · faucet-cli
src/hub/remote.rs:167medium severity secret_environment_variable in library code (6 places): GITHUB_TOKEN
2static:yara:persistence_locations
static · faucet-cli
README.md:587medium severity yara:persistence_locations in library code (2 places): Paths and keys used to persist on a developer machine
1static:build_script
static · faucet-cli
build.rslow severity build_script in build_script code: build.rs

Behavior

New since the previous version

static:credential_access

Profile

static:credential_access static:environment_enumeration static:exfiltration_endpoint static:secret_environment_variable static:yara:persistence_locations

Static findings

16 groups
high exfiltration_endpoint test 1
medium secret_environment_variable library 3
medium secret_environment_variable test 3
medium yara_match persistence_locations library 2
medium credential_access library 1
medium environment_enumeration library 1
low network_access test 189
low network_access library 64
low process_spawn test 10
low build_script build_script 1
low process_spawn library 1
info url_literal library 679
info url_literal test 292
info unsafe_code library 17
info unsafe_code test 7
info environment_enumeration test 1

Run: check

failed
Ended
agent reported the end
Guest
exit code 101
Run time
1.2 s
VM restore
93 ms
Payload
62385 files, 1.1 GiB
Files opened
2315

Processes 1

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 5 ms 1.2 s 25856

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
7
Directories
12
Size
56.6 KiB
Compiled units
0

Nothing outside the build areas.

Output

Standard error
error: rustc 1.98.1 is not supported by the following packages:
  faucet-auth@1.5.0 requires rustc 1.99
  faucet-cli@1.16.0 requires rustc 1.99
  faucet-cli@1.16.0 requires rustc 1.99
  faucet-cli@1.16.0 requires rustc 1.99
  faucet-common-azure@1.2.3 requires rustc 1.99
  faucet-common-bigquery@1.3.0 requires rustc 1.99
  faucet-common-databricks@1.1.2 requires rustc 1.99
  faucet-common-delta@1.3.2 requires rustc 1.99
  faucet-common-dynamodb@1.2.0 requires rustc 1.99
  faucet-common-elasticsearch@1.2.0 requires rustc 1.99
  faucet-common-file@1.1.2 requires rustc 1.99
  faucet-common-gcs@1.3.0 requires rustc 1.99
  faucet-common-iceberg@1.2.0 requires rustc 1.99
  faucet-common-kafka@1.3.0 requires rustc 1.99
  faucet-common-kinesis@1.2.0 requires rustc 1.99
  faucet-common-mssql@1.3.0 requires rustc 1.99
  faucet-common-nats@1.2.2 requires rustc 1.99
  faucet-common-pubsub@1.3.0 requires rustc 1.99
  faucet-common-rabbitmq@1.1.2 requires rustc 1.99
  faucet-common-redis@1.0.0 requires rustc 1.99
  faucet-common-redshift@1.2.2 requires rustc 1.99
  faucet-common-s3@1.0.1 requires rustc 1.99
  faucet-common-sftp@1.1.2 requires rustc 1.99
  faucet-common-singer@1.1.1 requires rustc 1.99
  faucet-common-snowflake@1.3.0 requires rustc 1.99
  faucet-common-spanner@1.2.2 requires rustc 1.99
  faucet-common-sql@1.1.0 requires rustc 1.99
  faucet-common-sqs@1.2.0 requires rustc 1.99
  faucet-core@1.15.0 requires rustc 1.99
  faucet-lineage@2.4.0 requires rustc 1.99
  faucet-registry@1.0.0 requires rustc 1.99
  faucet-sink-azure-blob@1.2.3 requires rustc 1.99
  faucet-sink-bigquery@1.10.0 requires rustc 1.99
  faucet-sink-clickhouse@1.4.0 requires rustc 1.99
  faucet-sink-csv@1.6.0 requires rustc 1.99
  faucet-sink-databricks@1.2.0 requires rustc 1.99
  faucet-sink-delta@1.4.1 requires rustc 1.99
  faucet-sink-duckdb@1.3.0 requires rustc 1.99
  faucet-sink-dynamodb@1.2.0 requires rustc 1.99
  faucet-sink-elasticsearch@1.8.0 requires rustc 1.99
  faucet-sink-file@1.1.2 requires rustc 1.99
  faucet-sink-gcs@1.6.0 requires rustc 1.99
  faucet-sink-http@1.6.0 requires rustc 1.99
  faucet-sink-iceberg@1.7.0 requires rustc 1.99
  faucet-sink-jsonl@1.6.0 requires rustc 1.99
  faucet-sink-kafka@1.7.0 requires rustc 1.99
  faucet-sink-kinesis@1.3.0 requires rustc 1.99
  faucet-sink-mongodb@1.9.0 requires rustc 1.99
  faucet-sink-mssql@1.8.0 requires rustc 1.99
  faucet-sink-mysql@1.10.0 requires rustc 1.99
  faucet-sink-nats@1.2.1 requires rustc 1.99
  faucet-sink-parquet@1.6.0 requires rustc 1.99
  faucet-sink-postgres@1.10.0 requires rustc 1.99
  faucet-sink-pubsub@1.3.0 requires rustc 1.99
  faucet-sink-rabbitmq@1.1.1 requires rustc 1.99
  faucet-sink-redis@1.6.0 requires rustc 1.99
  faucet-sink-redshift@1.4.0 requires rustc 1.99
  faucet-sink-s3@1.7.0 requires rustc 1.99
  faucet-sink-sftp@1.2.2 requires rustc 1.99
  faucet-sink-singer@1.1.1 requires rustc 1.99
  faucet-sink-snowflake@1.8.0 requires rustc 1.99
  faucet-sink-spanner@1.4.0 requires rustc 1.99
  faucet-sink-sqlite@1.10.0 requires rustc 1.99
  faucet-sink-sqs@1.3.0 requires rustc 1.99
  faucet-sink-stdout@1.6.0 requires rustc 1.99
  faucet-source-azure-blob@1.2.3 requires rustc 1.99
  faucet-source-bigquery@1.7.0 requires rustc 1.99
  faucet-source-clickhouse@1.2.2 requires rustc 1.99
  faucet-source-csv@1.7.0 requires rustc 1.99
  faucet-source-databricks@1.3.2 requires rustc 1.99
  faucet-source-delta@1.4.2 requires rustc 1.99
  faucet-source-duckdb@1.4.0 requires rustc 1.99
  faucet-source-dynamodb@1.2.0 requires rustc 1.99
  faucet-source-elasticsearch@1.7.0 requires rustc 1.99
  faucet-source-file@1.1.2 requires rustc 1.99
  faucet-source-gcs@1.9.0 requires rustc 1.99
  faucet-source-graphql@1.8.0 requires rustc 1.99
  faucet-source-grpc@1.6.0 requires rustc 1.99
  faucet-source-grpc@1.6.0 requires rustc 1.99
  faucet-source-grpc@1.6.0 requires rustc 1.99
  faucet-source-iceberg@1.2.0 requires rustc 1.99
  faucet-source-kafka@1.6.0 requires rustc 1.99
  faucet-source-kinesis@1.3.0 requires rustc 1.99
  faucet-source-mongodb@1.8.0 requires rustc 1.99
  faucet-source-mongodb-cdc@1.5.0 requires rustc 1.99
  faucet-source-mssql@1.7.0 requires rustc 1.99
  faucet-source-mssql-cdc@1.2.2 requires rustc 1.99
  faucet-source-mysql@1.9.0 requires rustc 1.99
  faucet-source-mysql-cdc@1.5.0 requires rustc 1.99
  faucet-source-nats@1.2.1 requires rustc 1.99
  faucet-source-parquet@1.7.0 requires rustc 1.99
  faucet-source-postgres@1.10.0 requires rustc 1.99
  faucet-source-postgres-cdc@1.6.0 requires rustc 1.99
  faucet-source-pubsub@1.3.0 requires rustc 1.99
  faucet-source-rabbitmq@1.1.1 requires rustc 1.99
  faucet-source-redis@1.6.0 requires rustc 1.99
  faucet-source-redshift@1.3.0 requires rustc 1.99
  faucet-source-rest@1.9.0 requires rustc 1.99
  faucet-source-s3@1.11.0 requires rustc 1.99
  faucet-source-sftp@1.3.2 requires rustc 1.99
  faucet-source-singer@1.3.1 requires rustc 1.99
  faucet-source-snowflake@1.6.0 requires rustc 1.99
  faucet-source-spanner@1.3.2 requires rustc 1.99
  faucet-source-sqlite@1.9.0 requires rustc 1.99
  faucet-source-sqs@1.3.0 requires rustc 1.99
  faucet-source-webhook@1.4.0 requires rustc 1.99
  faucet-source-websocket@1.4.0 requires rustc 1.99
  faucet-source-xml@1.9.0 requires rustc 1.99
  faucet-state-postgres@1.5.0 requires rustc 1.99
  faucet-state-redis@1.3.0 requires rustc 1.99
Either upgrade rustc or select compatible dependency versions with
`cargo update <name>@<current-ver> --precise <compatible-ver>`
where `<compatible-ver>` is the latest version supporting rustc 1.98.1

Timeline

6
WhenFromToEventWorker
2026-10-29 21:28 UTCDiscoveredFetchedfetchedfetcher-12688
2026-10-29 21:28 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-12726
2026-10-29 21:28 UTCReadyForSandboxRunningsandbox_startedorchestrator-12760-slot1
2026-10-29 21:28 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-12760-slot1
2026-10-29 21:28 UTCDynamicallyAnalyzedScoredscoredanalyzer-12816
2026-10-29 21:28 UTCScoredDonefinalizedanalyzer-12816