github-copilot-sdk 1.0.15-unstable.36638597907.ge270afd

Done dynamic on Linux job 36635 crates.io SBOM Findings (VEX)

The build looked up github.com.

high

False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.

Evidence

Points	Signal	Where	What
10	network_lookup network · github-copilot-sdk	github.com	The build looked up github.com.
10	new_high_finding diff · github-copilot-sdk	build/download.rs:6	New since 1.0.15-preview.4: downloader_pattern
10	static:downloader_pattern static · github-copilot-sdk	build/download.rs:6	high severity downloader_pattern in build_script code: ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:280
10	static:network_access static · github-copilot-sdk	build/download.rs:6	medium severity network_access in build_script code (76 places): ureq::Error
10	static:process_spawn static · github-copilot-sdk	build/in_process/tests.rs:280	medium severity process_spawn in build_script code (18 places): std::process::Command

5 without points

Signal	Where	What
static:build_script static · github-copilot-sdk	build.rs	low severity build_script in build_script code: build.rs
static:secret_environment_variable static · github-copilot-sdk	tests/e2e/support.rs:676	medium severity secret_environment_variable in test code (4 places): GH_TOKEN
static:shell_command static · github-copilot-sdk	tests/e2e/mode_empty.rs:32	medium severity shell_command in test code (9 places): powershell
static:url_literal static · github-copilot-sdk	build/in_process.rs:461	low severity url_literal in build_script code (93 places): https://github.com/github/copilot-cli/releases/download/v{version}
static:windows_api static · github-copilot-sdk	src/generated/rpc.rs:12277	medium severity windows_api in library code (3 places): ShellExecuteUserRequestedRequest

Behavior

New since the previous version

static:downloader_pattern static:process_spawn

Profile

net:github.com static:downloader_pattern static:network_access static:process_spawn static:secret_environment_variable static:shell_command static:windows_api

Static findings

high downloader_pattern build_script 1

ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:280 build/download.rs:6

medium network_access build_script 26

ureq::Error build/download.rs:6 build/download.rs:26
ureq::Error::StatusCode build/download.rs:8 build/download.rs:28
ureq::Error::BadUri build/download.rs:9
ureq::Error::Http build/download.rs:10
ureq::Error::InvalidProxyUrl build/download.rs:11
ureq::Error::TooManyRedirects build/download.rs:12
ureq::Error::RedirectFailed build/download.rs:13
ureq::Error::RequireHttpsOnly build/download.rs:14
ureq::Error::TlsRequired build/download.rs:15
ureq::Error::Tls build/download.rs:16
ureq::Error::NativeTls build/download.rs:17
ureq::Error::Pem build/download.rs:18
ureq::Error::Der build/download.rs:19
ureq::Error::BodyExceedsLimit build/download.rs:20
ureq::Error::LargeResponseHeader build/download.rs:21
ureq::http::StatusCode::from_u16 build/download.rs:29
ureq::Agent::config_builder build/in_process.rs:982 build/out_of_process.rs:596
ureq::tls::TlsConfig::builder build/in_process.rs:984 build/out_of_process.rs:598
ureq::tls::TlsProvider::NativeTls build/in_process.rs:985 build/out_of_process.rs:599
ureq::tls::RootCerts::PlatformVerifier build/in_process.rs:986 build/out_of_process.rs:600

medium shell_command test 9

powershell tests/e2e/mode_empty.rs:32 tests/e2e/mode_empty.rs:123
powershell -NoLogo -NoProfile -Command "Set-Content -LiteralPath '{}' -Value '{}'" tests/e2e/rpc_shell_and_fleet.rs:102
powershell -NoLogo -NoProfile -Command "Start-Sleep -Seconds 30" tests/e2e/rpc_shell_and_fleet.rs:115
powershell -NoLogo -NoProfile -Command "Set-Content -LiteralPath '{}' -Value started; Start-Sleep -Seconds 30; Set-Content -LiteralPath '{}' -Value should-not-exist" tests/e2e/rpc_shell_edge_cases.rs:332
powershell -NoLogo -NoProfile -Command "Set-Content -LiteralPath 'marker.txt' -Value '{marker}'" tests/e2e/rpc_shell_edge_cases.rs:360
powershell -NoLogo -NoProfile -Command "Start-Sleep -Seconds 60" tests/e2e/rpc_shell_edge_cases.rs:371
powershell -NoLogo -NoProfile -Command "[Console]::Error.WriteLine('boom'); exit 2" & echo done > "{}" & exit /b 2 tests/e2e/rpc_shell_edge_cases.rs:392
powershell -NoLogo -NoProfile -Command "Write-Host ('x' * 71680); Set-Content -LiteralPath '{}' -Value done" tests/e2e/rpc_shell_edge_cases.rs:408

medium secret_environment_variable test 4

GH_TOKEN tests/e2e/support.rs:676 tests/e2e/support.rs:1481
GITHUB_TOKEN tests/e2e/support.rs:677 tests/e2e/support.rs:1482

medium process_spawn build_script 2

std::process::Command build/in_process/tests.rs:280
std::process::Command::new build/in_process/tests.rs:281

medium windows_api test 2

github_copilot_sdk::rpc::ShellExecuteUserRequestedRequest tests/e2e/rpc_shell_user_requested.rs:30 tests/e2e/rpc_shell_user_requested.rs:97

medium windows_api library 1

ShellExecuteUserRequestedRequest src/generated/rpc.rs:12277

low network_access test 43

ureq::Error::StatusCode tests/build_download.rs:8 tests/build_download.rs:18 tests/build_download.rs:30
ureq::Error::Io tests/build_download.rs:9
ureq::Error::HostNotFound tests/build_download.rs:12
ureq::Error::BodyStalled tests/build_download.rs:13
ureq::Error::BadUri tests/build_download.rs:19
ureq::Error::InvalidProxyUrl tests/build_download.rs:22 tests/build_download.rs:34
ureq::Error::TooManyRedirects tests/build_download.rs:23
ureq::Error::TlsRequired tests/build_download.rs:24
tokio::net::TcpListener::bind tests/builtin_plugin_directories_test.rs:50 tests/e2e/copilot_request_handler.rs:462 tests/e2e/copilot_request_handler.rs:475 tests/extension_launch_provider_test.rs:332 tests/extension_launch_provider_test.rs:426 tests/http_response_forwarding_test.rs:61 tests/http_response_forwarding_test.rs:467 tests/installation_confirmation_test.rs:508 tests/installation_confirmation_test.rs:570 tests/installation_confirmation_test.rs:694
tokio::net::TcpStream tests/e2e/copilot_request_handler.rs:405 tests/extension_launch_provider_test.rs:391
reqwest::Url::parse tests/e2e/mcp_oauth.rs:68 tests/e2e/runtime_host_support.rs:195 tests/e2e/runtime_host_support.rs:510 tests/e2e/runtime_host_support.rs:575 tests/runtime_host_e2e.rs:414 tests/runtime_host_e2e.rs:434
reqwest::get tests/e2e/mcp_oauth.rs:609
std::net::TcpListener::bind tests/e2e/multi_client.rs:451 tests/e2e/multi_client_commands_elicitation.rs:224 tests/e2e/pending_work_resume.rs:340 tests/e2e/session_config.rs:634 tests/runtime_host_e2e.rs:215 tests/runtime_host_e2e.rs:325
tokio::net::TcpStream::connect tests/e2e/runtime_host_support.rs:576
std::net::TcpStream tests/e2e/support.rs:779
std::net::TcpStream::connect_timeout tests/e2e/support.rs:782
tokio::net::tcp::OwnedReadHalf tests/http_response_forwarding_test.rs:27 tests/http_response_forwarding_test.rs:54
tokio::net::tcp::OwnedWriteHalf tests/http_response_forwarding_test.rs:44 tests/http_response_forwarding_test.rs:55

low url_literal build_script 19

https://github.com/github/copilot-cli/releases/download/v{version} build/in_process.rs:461 build/in_process/tests.rs:98 build/out_of_process.rs:81
https://github.com/github/copilot-sdk/releases/download/runtime-{version} build/in_process.rs:463
https://github.com/github/copilot-sdk/releases/download/runtime-{}/{asset_name} build/in_process.rs:484
https://github.com/github/copilot-cli/releases/download/v{}/{asset_name} build/in_process.rs:489
https://github.com/github/copilot-sdk/releases/download/runtime-{VERSION} build/in_process/tests.rs:31 build/in_process/tests.rs:43
https://github.com/github/copilot-cli/releases/download/v{VERSION} build/in_process/tests.rs:45
https://github.com/github/copilot-sdk/releases/download/runtime-9.9.9 build/in_process/tests.rs:114
https://github.com/github/copilot-sdk/releases/latest build/in_process/tests.rs:115
https://github.com/github/copilot-agent-runtime/releases/download/runtime-1.2.3 build/in_process/tests.rs:116
https://token@github.com/github/copilot-sdk/releases/download/runtime-1.2.3 build/in_process/tests.rs:117
https://github.com/github/copilot-cli/releases/download/v1.2.3/ build/in_process/tests.rs:118
https://github.com/github/copilot-cli/releases/download/v1.2.3?token=secret build/in_process/tests.rs:119
http://github.com/github/copilot-cli/releases/download/v1.2.3 build/in_process/tests.rs:120
release-url=https://github.com/github/copilot-sdk/releases/download/runtime-{VERSION}\u{a} build/in_process/tests.rs:252 build/in_process/tests.rs:429
https://github.com/github/copilot-cli/releases/download/v{version}/SHA256SUMS.txt build/out_of_process.rs:259

low process_spawn test 10

std::process::Command::new tests/cli_resolution_test.rs:303 tests/e2e/client_lifecycle.rs:185 tests/e2e/rpc_workspace_checkpoints.rs:363 tests/e2e/runtime_host_support.rs:38 tests/e2e/support.rs:1251 tests/e2e/support.rs:1324 tests/extension_launch_provider_runtime_test.rs:287 tests/extension_launch_provider_runtime_test.rs:307
tokio::process::Command::new tests/e2e/client_options.rs:871 tests/e2e/mcp_oauth.rs:584

low network_access library 7

reqwest::Client src/copilot_request_handler.rs:385
reqwest::Client::builder src/copilot_request_handler.rs:386
reqwest::redirect::Policy::none src/copilot_request_handler.rs:387
reqwest::Method::from_bytes src/copilot_request_handler.rs:399
tokio::net::TcpStream src/copilot_request_handler.rs:435
tokio::net::TcpStream::connect src/lib.rs:1492 src/lib.rs:1527

low process_spawn library 6

tokio::process::Command src/lib.rs:2138 src/lib.rs:3423 src/lib.rs:3953 src/process_tree.rs:14 src/process_tree.rs:91
tokio::process::Command::new src/lib.rs:2139

low build_script build_script 1

build.rs build.rs

low foreign_functions library 1

extern block src/embeddedcli.rs:413

info url_literal test 52

https://byok-endpoint.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:20
https://byok-red.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:22
https://byok-blue.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:24
https://example.com/counter/{} tests/e2e/canvas.rs:85
https://example.com/counter/counter-1 tests/e2e/canvas.rs:195
https://tenant.ghe.example tests/e2e/client.rs:113
https://fallback.ghe.example tests/e2e/client.rs:115
https://github.com tests/e2e/client.rs:116 tests/e2e/rpc_server_misc.rs:152 tests/e2e/rpc_server_misc.rs:171
https://models.example.test/v1 tests/e2e/client_options.rs:177 tests/e2e/client_options.rs:207 tests/e2e/rpc_session_state_extras.rs:291
https://github.com/github/copilot-sdk/pull/610 tests/e2e/client_options.rs:390
{scheme}://{authority}{path_and_query} tests/e2e/copilot_request_handler.rs:323
https://byok.invalid/v1 tests/e2e/copilot_request_handler.rs:758
https://github.com/copilot/cli/client-metadata.json tests/e2e/mcp_oauth.rs:26
https://alpha.example.test/v1 tests/e2e/multi_provider_registry.rs:34
https://beta.example.test tests/e2e/multi_provider_registry.rs:39
https://api.example.test/v1 tests/e2e/provider_endpoint.rs:41 tests/e2e/provider_endpoint.rs:71
http:// tests/e2e/provider_endpoint.rs:151 tests/e2e/support.rs:1573
https:// tests/e2e/provider_endpoint.rs:152
ui://missing/resource.html tests/e2e/rpc_mcp_and_skills.rs:540
https://example.com/mcp tests/e2e/rpc_mcp_config.rs:132
https://example.com/updated-mcp tests/e2e/rpc_mcp_config.rs:176
https://offline.invalid/v1 tests/e2e/rpc_surface_coverage.rs:575 tests/e2e/rpc_surface_coverage.rs:817
https://github.com/test-org/test-repo.git tests/e2e/rpc_workspace_checkpoints.rs:204 tests/e2e/rpc_workspace_checkpoints.rs:322
ahp-root:// tests/e2e/runtime_host_support.rs:23
https://github.com/github/copilot-sdk/issues/1234 tests/e2e/session.rs:1576
https://api.openai.com/v1 tests/e2e/session.rs:1738 tests/e2e/session.rs:1804
https://my-resource.openai.azure.com tests/e2e/session.rs:1766
https://anthropic-citations.invalid/v1 tests/e2e/session_config.rs:489
Listening: (http://[^\s]+)\s+(\{.*\})$ tests/e2e/support.rs:1343
http://unused.test tests/http_response_forwarding_test.rs:187 tests/http_response_forwarding_test.rs:347 tests/http_response_forwarding_test.rs:365 tests/http_response_forwarding_test.rs:419 tests/http_response_forwarding_test.rs:448
http://{}/stream tests/http_response_forwarding_test.rs:468
https://example.test/mcp tests/mcp_plan_transport_choice_test.rs:55
https://example.test/{} tests/session_test.rs:281
{"resource":"https://example.com/mcp"} tests/session_test.rs:946
https://example.com tests/session_test.rs:2944 tests/session_test.rs:2954 tests/session_test.rs:2964
https://example.test/counter tests/session_test.rs:6058
https://example.test/counter-updated tests/session_test.rs:6203

info url_literal library 22

http://127.0.0.1:4321 src/ahp_host/tests.rs:132
https://example.test/{} src/canvas.rs:192
https://example.test/echo src/canvas.rs:241
http://collector:4318 src/lib.rs:3433 src/lib.rs:3440 src/lib.rs:3473 src/lib.rs:3489 src/lib.rs:3537 src/lib.rs:3550
http://from-config:4318 src/lib.rs:3568
http://from-user-env:4318 src/lib.rs:3573 src/lib.rs:3580
file:///tmp/data.bin src/tool.rs:479
file:///tmp/report.pdf src/tool.rs:537
https://api.example.com/v1 src/types.rs:7060 src/types.rs:7078
https://example.openai.azure.com src/types.rs:7100
https://example.com/oauth/client-metadata.json src/types.rs:7247
https://api.example.com src/types.rs:7664 src/types.rs:7676 src/types.rs:7701
https://example.com/issues/7 src/types.rs:8087

info unsafe_code library 3

1 unsafe blocks, functions or impls src/embeddedcli.rs:421
21 unsafe blocks, functions or impls src/ffi.rs:55
12 unsafe blocks, functions or impls src/process_tree.rs:75

info unsafe_code test 3

2 unsafe blocks, functions or impls tests/cli_resolution_test.rs:33 tests/e2e/client_lifecycle.rs:259
7 unsafe blocks, functions or impls tests/e2e/support.rs:1109

Run: full

failed

The full build covers everything the earlier cargo check run did, so only the full run is shown.

Ended: agent reported the end
Guest: exit code 101
Run time: 1 min 15 s
VM restore: 66 ms
Payload: 12751 files, 287.7 MiB
Files opened: 18356

Processes 239

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 226 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	build --locked --offline	5 ms	1 min 15 s	25856
└rustc /usr/local/bin/rustc ×149	--crate-name syn --edition=2021 /cw/vendor/syn-3.0.6/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --cfg feature="clone-impls" --cfg feature="default" --cfg feature="derive" --cfg feature="extra-traits" --cfg feature="fold" --cfg feature="full" --cfg feature="parsing" --cfg feature="printing" --cfg feature="proc-macro" --cfg feature="visit"	356 ms	4.1 s	0
└rustc /usr/local/bin/rustc ×16	--crate-name build_script_main --edition=2021 /cw/vendor/openssl-sys-0.9.117/build/main.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("aws-lc", "aws-lc-fips", "bindgen", "bssl-sys", "openssl-src", "unstable_boringssl", "vendored")) -C metadata=382f0c39eef1cf14 -C extra-filename=-9db41c071c247f6c --out-dir /work/target/debug/build/openssl-sys-9db41c071c247f6c -L dependency=/work/target/debug/deps --extern cc=/work/target/debug/deps/libcc-d2f014ceb86c8cd0.rlib --extern pkg_config=/work/target/debug/deps/libpkg_config-df4e365301e68a72.rlib --extern vcpkg=/work/target/debug/deps/libvcpkg-8e4474c5871a9cef.rlib --cap-lints allow	6.6 s	316 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/openssl-sys-9db41c071c247f6c/rustc2hfjF2/symbols.o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c.build_script_main.6032cb28ac8b50ca-cgu.0.rcgu.o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c.build_script_main.6032cb28ac8b50ca-cgu.1.rcgu.o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c.crh3byju91qwlu8z7x0s7rapk.rcgu.o -Wl,--as-needed -Wl,-Bstatic /work/target/debug/deps/libvcpkg-8e4474c5871a9cef.rlib /work/target/debug/deps/libpkg_config-df4e365301e68a72.rlib /work/target/debug/deps/libcc-d2f014ceb86c8cd0.rlib /work/target/debug/deps/libfind_msvc_tools-47d85dec6b12ba9f.rlib /work/target/debug/deps/libshlex-69c11c7589f0c135.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libo	6.8 s	123 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccKdjwFg.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/openssl-sys-9db41c071c247f6c/rustc2hfjF2/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/	6.8 s	118 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccKdjwFg.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/openssl-sys-9db41c071c247f6c/rustc2hfjF2/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64	6.8 s	114 ms	0
└build_script openssl-sys		7.7 s	70 ms	0
└other /usr/bin/pkg-config ×2	--libs --cflags openssl	7.7 s	2 ms	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/5962503726252651129detect_compiler_family.c	7.7 s	24 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/5962503726252651129detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 5962503726252651129detect_compiler_family.c -dumpbase-ext .c	7.7 s	23 ms	0
└toolchain /usr/bin/cc	-?	7.8 s	2 ms	256
└toolchain /usr/bin/cc	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/flag_check -c /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/flag_check.c	7.8 s	28 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/flag_check.c -quiet -dumpdir /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccgt2UHY.s	7.8 s	22 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/flag_check /tmp/ccgt2UHY.s	7.8 s	5 ms	0
└build_script openssl		11.4 s	1 ms	0
└build_script native-tls		25.5 s	1 ms	0
└build_script getrandom		25.5 s	1 ms	0
└build_script crc32fast		27.4 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	27.5 s	6 ms	0
└build_script httparse		28.6 s	8 ms	0
└rustc /usr/local/bin/rustc	--version	28.6 s	7 ms	0
└build_script rustix		28.6 s	37 ms	0
└rustc /usr/local/bin/rustc ×2	--crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-8273b0e35e9c3920/out/rustix_test_can_compile -	28.6 s	19 ms	0
└build_script native-tls		35.7 s	1 ms	0
└build_script serde_core		38.1 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	38.1 s	6 ms	0
└build_script github-copilot-sdk		1 min 15 s	58 ms	25856

Network 2

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI github.com, inside TLS: GET /github/copilot-sdk/releases/download/runtime-1.0.89-1.unstable.r36638597907.ge270afd/github-copilot-1.0.89-1.unstable.r36638597907.ge270afd-linux-x64.tgz, host github.com, agent ureq/3.4.2	1.5 KiB

Sockets in the trace 3

When	Program	How	Address	Type
1 min 15 s	/work/target/debug/build/github-copilot-sdk-b8dab949f04c16db/build-script-build	connect	unix:/var/run/nscd/socket	stream
1 min 15 s	/work/target/debug/build/github-copilot-sdk-b8dab949f04c16db/build-script-build	connect	:53	datagram
1 min 15 s	/work/target/debug/build/github-copilot-sdk-b8dab949f04c16db/build-script-build	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 1253
Directories: 244
Size: 779.6 MiB
Compiled units: 307
Scan: stopped at a limit

Nothing outside the build areas.

Output

Standard error

   Compiling syn v3.0.6
   Compiling libc v0.2.189
   Compiling cfg-if v1.0.5
   Compiling bytes v1.12.1
   Compiling synstructure v0.14.0
   Compiling itoa v1.0.18
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
   Compiling openssl-sys v0.9.117
   Compiling zerofrom-derive v0.1.8
   Compiling zerofrom v0.1.8
   Compiling yoke-derive v0.8.3
   Compiling pin-project-lite v0.2.17
   Compiling bitflags v2.13.2
   Compiling stable_deref_trait v1.2.1
   Compiling yoke v0.8.3
   Compiling futures-core v0.3.34
   Compiling errno v0.3.14
   Compiling zerovec-derive v0.11.6
   Compiling log v0.4.34
   Compiling zerovec v0.11.8
   Compiling signal-hook-registry v1.4.8
   Compiling socket2 v0.6.5
   Compiling mio v1.2.3
   Compiling displaydoc v0.2.7
   Compiling tokio-macros v2.7.2
   Compiling foreign-types-shared v0.1.1
   Compiling openssl v0.10.81
   Compiling foreign-types v0.3.2
   Compiling tokio v1.53.1
   Compiling openssl-macros v0.1.1
   Compiling smallvec v1.16.2
   Compiling futures-sink v0.3.34
   Compiling http v1.5.0
   Compiling hashbrown v0.17.1
   Compiling typenum v1.20.1
   Compiling equivalent v1.0.2
   Compiling openssl-probe v0.2.1
   Compiling generic-array v0.14.7
   Compiling tinystr v0.8.4
   Compiling writeable v0.6.4
   Compiling litemap v0.8.3
   Compiling percent-encoding v2.3.2
   Compiling slab v0.4.12
   Compiling icu_locale_core v2.3.0
   Compiling serde_core v1.0.229
   Compiling zerotrie v0.2.5
   Compiling potential_utf v0.1.6
   Compiling utf8_iter v1.0.4
   Compiling zeroize v1.9.0
   Compiling icu_collections v2.3.0
   Compiling icu_provider v2.3.1
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling futures-macro v0.3.34
   Compiling once_cell v1.21.4
   Compiling futures-task v0.3.34
   Compiling adler2 v2.0.1
   Compiling getrandom v0.3.4
   Compiling native-tls v0.2.18
   Compiling futures-util v0.3.34
   Compiling tracing-core v0.1.36
   Compiling crc32fast v1.5.2
   Compiling digest v0.10.7
   Compiling icu_properties_data v2.3.0
   Compiling httparse v1.10.1
   Compiling icu_normalizer_data v2.3.0
   Compiling http-body v1.1.0
   Compiling tokio-util v0.7.19
   Compiling cpufeatures v0.2.17
   Compiling rustix v1.1.5
   Compiling simd-adler32 v0.3.10
   Compiling tracing v0.1.44
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling zerocopy v0.8.59
   Compiling indexmap v2.14.2
   Compiling tower-service v0.3.3
   Compiling atomic-waker v1.1.2
   Compiling fnv v1.0.7
   Compiling base64ct v1.8.3
   Compiling try-lock v0.2.5
   Compiling linux-raw-sys v0.12.1
   Compiling want v0.3.1
   Compiling pem-rfc7468 v1.0.0
   Compiling h2 v0.4.19
   Compiling rand_core v0.9.5
   Compiling ppv-lite86 v0.2.21
   Compiling idna_adapter v1.2.2
   Compiling zmij v1.0.23
   Compiling miniz_oxide v0.9.1
   Compiling rustls-pki-types v1.15.1
   Compiling futures-channel v0.3.34
   Compiling option-ext v0.2.0
   Compiling memchr v2.8.3
   Compiling zlib-rs v0.6.8
   Compiling base64 v0.23.1
   Compiling ureq-proto v0.6.4
   Compiling flate2 v1.1.10
   Compiling zopfli v0.8.3
   Compiling dirs-sys v0.4.1
   Compiling hyper v1.11.1
   Compiling webpki-root-certs v1.0.9
   Compiling idna v1.1.0
   Compiling rand_chacha v0.9.0
   Compiling der v0.8.2
   Compiling xattr v1.6.1
   Compiling tokio-native-tls v0.3.1
   Compiling form_urlencoded v1.2.2
   Compiling sync_wrapper v1.0.2
   Compiling filetime v0.2.29
   Compiling thiserror-impl v2.0.21
   Compiling utf8-zero v0.8.1
   Compiling typed-path v0.12.3
   Compiling ipnet v2.12.2
   Compiling tower-layer v0.3.3
   Compiling tower v0.5.3
   Compiling hyper-util v0.1.21
   Compiling zip v7.2.0
   Compiling ureq v3.4.2
   Compiling thiserror v2.0.21
   Compiling tar v0.4.46
   Compiling url v2.5.8
   Compiling serde_json v1.0.151
   Compiling rand v0.9.5
   Compiling dirs v5.0.1
   Compiling aho-corasick v1.1.5
   Compiling sha1 v0.10.7
   Compiling sha2 v0.10.9
   Compiling http-body-util v0.1.5
   Compiling scopeguard v1.2.0
   Compiling regex-syntax v0.8.11
   Compiling data-encoding v2.11.1
   Compiling utf-8 v0.7.6
   Compiling tungstenite v0.28.0
   Compiling regex-automata v0.4.18
   Compiling lock_api v0.4.14
   Compiling hyper-tls v0.6.0
   Compiling github-copilot-sdk v1.0.15-unstable.36638597907.ge270afd
   Compiling tower-http v0.6.11
   Compiling parking_lot_core v0.9.12
   Compiling getrandom v0.4.3
   Compiling serde_derive v1.0.229
   Compiling serde v1.0.229
   Compiling reqwest v0.13.5
   Compiling uuid v1.26.1
   Compiling parking_lot v0.12.5
warning: github-copilot-sdk@1.0.15-unstable.36638597907.ge270afd: Downloading https://github.com/github/copilot-sdk/releases/download/runtime-1.0.89-1.unstable.r36638597907.ge270afd/github-copilot-1.0.89-1.unstable.r36638597907.ge270afd-linux-x64.tgz
error: failed to run custom build command for `github-copilot-sdk v1.0.15-unstable.36638597907.ge270afd`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/github-copilot-sdk-b8dab949f04c16db/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=COPILOT_SKIP_CLI_DOWNLOAD
  cargo:rerun-if-env-changed=COPILOT_CLI_EXTRACT_DIR
  cargo:rerun-if-env-changed=BUNDLED_CLI_CACHE_DIR
  cargo::rustc-check-cfg=cfg(has_bundled_cli)
  cargo::rustc-check-cfg=cfg(has_extracted_cli)
  cargo:rerun-if-changed=cli-version.txt
  cargo:rerun-if-changed=cli-version-in-process.txt
  cargo:rustc-env=COPILOT_SDK_CLI_VERSION=1.0.89-1.unstable.r36638597907.ge270afd
  cargo:rustc-env=COPILOT_SDK_CLI_CACHE_ID=copilot-sdk-runtime-1.0.89-1.unstable.r36638597907.ge270afd
  cargo:warning=Downloading https://github.com/github/copilot-sdk/releases/download/runtime-1.0.89-1.unstable.r36638597907.ge270afd/github-copilot-1.0.89-1.unstable.r36638597907.ge270afd-linux-x64.tgz

  --- stderr

  thread 'main' (2352) panicked at /cw/vendor/github-copilot-sdk-1.0.15-unstable.36638597907.ge270afd/build/in_process.rs:967:25:
  Failed to download https://github.com/github/copilot-sdk/releases/download/runtime-1.0.89-1.unstable.r36638597907.ge270afd/github-copilot-1.0.89-1.unstable.r36638597907.ge270afd-linux-x64.tgz: HTTP 404 Not Found
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-09-30 04:06 UTC	Discovered	Fetched	fetched	fetcher-627152
2026-09-30 04:06 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-450252
2026-09-30 04:06 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-639812-slot2
2026-09-30 04:07 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-639812-slot2
2026-09-30 04:07 UTC	DynamicallyAnalyzed	ReadyForSandbox	scored	analyzer-523934
2026-09-30 04:07 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-639812-slot2
2026-09-30 04:08 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-639812-slot2
2026-09-30 04:08 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-523934
2026-09-30 04:08 UTC	Scored	Done	finalized	analyzer-523934