github-copilot-sdk 1.0.17-preview.0

Done dynamic on Linux job 54149 crates.io SBOM Findings (VEX)

The build looked up github.com.

high

False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.

Evidence

Points	Signal	Where	What
10	network_lookup network · github-copilot-sdk	github.com	The build looked up github.com.
10	new_high_finding diff · github-copilot-sdk	build/download.rs:6	New since 1.0.16: downloader_pattern
10	static:downloader_pattern static · github-copilot-sdk	build/download.rs:6	high severity downloader_pattern in build_script code: ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:380
10	static:network_access static · github-copilot-sdk	build/download.rs:6	medium severity network_access in build_script code (77 places): ureq::Error
10	static:process_spawn static · github-copilot-sdk	build/in_process/tests.rs:380	medium severity process_spawn in build_script code (17 places): std::process::Command

5 without points

Signal	Where	What
static:build_script static · github-copilot-sdk	build.rs	low severity build_script in build_script code: build.rs
static:secret_environment_variable static · github-copilot-sdk	tests/e2e/support.rs:656	medium severity secret_environment_variable in test code (4 places): GH_TOKEN
static:shell_command static · github-copilot-sdk	tests/e2e/mode_empty.rs:32	medium severity shell_command in test code (2 places): powershell
static:url_literal static · github-copilot-sdk	build/in_process.rs:493	low severity url_literal in build_script code (90 places): https://github.com/github/copilot-cli/releases/download/v{version}
static:windows_api static · github-copilot-sdk	src/generated/rpc.rs:12651	medium severity windows_api in library code: ShellExecuteUserRequestedRequest

Behavior

New since the previous version

static:downloader_pattern static:process_spawn

Profile

net:github.com static:downloader_pattern static:network_access static:process_spawn static:secret_environment_variable static:shell_command static:windows_api

Static findings

high downloader_pattern build_script 1

ureq::Error at build/download.rs:6 with std::process::Command at build/in_process/tests.rs:380 build/download.rs:6

medium network_access build_script 26

ureq::Error build/download.rs:6 build/download.rs:26
ureq::Error::StatusCode build/download.rs:8 build/download.rs:28
ureq::Error::BadUri build/download.rs:9
ureq::Error::Http build/download.rs:10
ureq::Error::InvalidProxyUrl build/download.rs:11
ureq::Error::TooManyRedirects build/download.rs:12
ureq::Error::RedirectFailed build/download.rs:13
ureq::Error::RequireHttpsOnly build/download.rs:14
ureq::Error::TlsRequired build/download.rs:15
ureq::Error::Tls build/download.rs:16
ureq::Error::NativeTls build/download.rs:17
ureq::Error::Pem build/download.rs:18
ureq::Error::Der build/download.rs:19
ureq::Error::BodyExceedsLimit build/download.rs:20
ureq::Error::LargeResponseHeader build/download.rs:21
ureq::http::StatusCode::from_u16 build/download.rs:29
ureq::Agent::config_builder build/in_process.rs:1014 build/out_of_process.rs:596
ureq::tls::TlsConfig::builder build/in_process.rs:1016 build/out_of_process.rs:598
ureq::tls::TlsProvider::NativeTls build/in_process.rs:1017 build/out_of_process.rs:599
ureq::tls::RootCerts::PlatformVerifier build/in_process.rs:1018 build/out_of_process.rs:600

medium secret_environment_variable test 4

GH_TOKEN tests/e2e/support.rs:656 tests/e2e/support.rs:1467
GITHUB_TOKEN tests/e2e/support.rs:657 tests/e2e/support.rs:1468

medium process_spawn build_script 2

std::process::Command build/in_process/tests.rs:380
std::process::Command::new build/in_process/tests.rs:381

medium shell_command test 2

powershell tests/e2e/mode_empty.rs:32 tests/e2e/mode_empty.rs:123

medium windows_api library 1

ShellExecuteUserRequestedRequest src/generated/rpc.rs:12651

low network_access test 44

ureq::Error::StatusCode tests/build_download.rs:8 tests/build_download.rs:18 tests/build_download.rs:30
ureq::Error::Io tests/build_download.rs:9
ureq::Error::HostNotFound tests/build_download.rs:12
ureq::Error::BodyStalled tests/build_download.rs:13
ureq::Error::BadUri tests/build_download.rs:19
ureq::Error::InvalidProxyUrl tests/build_download.rs:22 tests/build_download.rs:34
ureq::Error::TooManyRedirects tests/build_download.rs:23
ureq::Error::TlsRequired tests/build_download.rs:24
tokio::net::TcpListener::bind tests/builtin_plugin_directories_test.rs:50 tests/e2e/copilot_request_handler.rs:462 tests/e2e/copilot_request_handler.rs:475 tests/extension_launch_provider_test.rs:332 tests/extension_launch_provider_test.rs:426 tests/http_response_forwarding_test.rs:61 tests/http_response_forwarding_test.rs:467 tests/installation_confirmation_test.rs:508 tests/installation_confirmation_test.rs:570 tests/installation_confirmation_test.rs:694
tokio::net::TcpStream tests/e2e/copilot_request_handler.rs:405 tests/extension_launch_provider_test.rs:391
reqwest::Url::parse tests/e2e/mcp_oauth.rs:67 tests/e2e/runtime_host_support.rs:208 tests/e2e/runtime_host_support.rs:523 tests/e2e/runtime_host_support.rs:591 tests/runtime_host_e2e.rs:394 tests/runtime_host_e2e.rs:418
reqwest::get tests/e2e/mcp_oauth.rs:464
std::net::TcpListener::bind tests/e2e/multi_client.rs:451 tests/e2e/multi_client_commands_elicitation.rs:224 tests/e2e/pending_work_resume.rs:340 tests/e2e/session_config.rs:634 tests/runtime_host_e2e.rs:196 tests/runtime_host_e2e.rs:299
tokio::net::TcpStream::connect tests/e2e/runtime_host_support.rs:592
std::net::TcpStream tests/e2e/support.rs:759
std::net::TcpStream::connect_timeout tests/e2e/support.rs:762
reqwest::Client::new tests/fixtures/connector-runtime/src/main.rs:50
tokio::net::tcp::OwnedReadHalf tests/http_response_forwarding_test.rs:27 tests/http_response_forwarding_test.rs:54
tokio::net::tcp::OwnedWriteHalf tests/http_response_forwarding_test.rs:44 tests/http_response_forwarding_test.rs:55

low url_literal build_script 23

https://github.com/github/copilot-cli/releases/download/v{version} build/in_process.rs:493 build/in_process/tests.rs:104 build/in_process/tests.rs:154 build/in_process/tests.rs:189 build/out_of_process.rs:81
https://github.com/github/copilot-sdk/releases/download/runtime-{version} build/in_process.rs:495 build/in_process/tests.rs:152 build/in_process/tests.rs:187
https://github.com/github/copilot-sdk/releases/download/runtime-{}/{asset_name} build/in_process.rs:516
https://github.com/github/copilot-cli/releases/download/v{}/{asset_name} build/in_process.rs:521
https://github.com/github/copilot-sdk/releases/download/runtime-{VERSION} build/in_process/tests.rs:31 build/in_process/tests.rs:43
https://github.com/github/copilot-cli/releases/download/v{VERSION} build/in_process/tests.rs:45
https://github.com/github/copilot-sdk/releases/download/runtime-9.9.9 build/in_process/tests.rs:214
https://github.com/github/copilot-sdk/releases/latest build/in_process/tests.rs:215
https://github.com/github/copilot-agent-runtime/releases/download/runtime-1.2.3 build/in_process/tests.rs:216
https://token@github.com/github/copilot-sdk/releases/download/runtime-1.2.3 build/in_process/tests.rs:217
https://github.com/github/copilot-cli/releases/download/v1.2.3/ build/in_process/tests.rs:218
https://github.com/github/copilot-cli/releases/download/v1.2.3?token=secret build/in_process/tests.rs:219
http://github.com/github/copilot-cli/releases/download/v1.2.3 build/in_process/tests.rs:220
release-url=https://github.com/github/copilot-sdk/releases/download/runtime-{VERSION}\u{a} build/in_process/tests.rs:352 build/in_process/tests.rs:529
https://github.com/github/copilot-cli/releases/download/v{version}/SHA256SUMS.txt build/out_of_process.rs:259

low process_spawn test 9

std::process::Command::new tests/cli_resolution_test.rs:320 tests/e2e/client_lifecycle.rs:185 tests/e2e/runtime_host_support.rs:38 tests/e2e/support.rs:1231 tests/e2e/support.rs:1304 tests/extension_launch_provider_runtime_test.rs:287 tests/extension_launch_provider_runtime_test.rs:307
tokio::process::Command::new tests/e2e/client_options.rs:915 tests/e2e/mcp_oauth.rs:439

low network_access library 7

reqwest::Client src/copilot_request_handler.rs:385
reqwest::Client::builder src/copilot_request_handler.rs:386
reqwest::redirect::Policy::none src/copilot_request_handler.rs:387
reqwest::Method::from_bytes src/copilot_request_handler.rs:399
tokio::net::TcpStream src/copilot_request_handler.rs:435
tokio::net::TcpStream::connect src/lib.rs:1499 src/lib.rs:1534

low process_spawn library 6

tokio::process::Command src/lib.rs:2145 src/lib.rs:3433 src/lib.rs:3963 src/process_tree.rs:14 src/process_tree.rs:91
tokio::process::Command::new src/lib.rs:2146

low build_script build_script 1

build.rs build.rs

low foreign_functions library 1

extern block src/embeddedcli.rs:413

info url_literal test 43

https://example.com/github.svg tests/api_types_test.rs:450 tests/api_types_test.rs:456
https://github.com/github/copilot-cli/releases/download/v{version} tests/cli_resolution_test.rs:248
https://github.com/github/copilot-sdk/releases/download/runtime-{version} tests/cli_resolution_test.rs:252
https://byok-endpoint.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:20
https://byok-red.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:22
https://byok-blue.invalid/v1 tests/e2e/byok_bearer_token_provider.rs:24
https://example.com/counter/{} tests/e2e/canvas.rs:85
https://example.com/counter/counter-1 tests/e2e/canvas.rs:195
https://tenant.ghe.example tests/e2e/client.rs:113
https://fallback.ghe.example tests/e2e/client.rs:115
https://github.com tests/e2e/client.rs:116 tests/fixtures/connector-runtime/src/main.rs:122
https://models.example.test/v1 tests/e2e/client_options.rs:177 tests/e2e/client_options.rs:207
https://github.com/github/copilot-sdk/pull/610 tests/e2e/client_options.rs:434
{scheme}://{authority}{path_and_query} tests/e2e/copilot_request_handler.rs:323
https://byok.invalid/v1 tests/e2e/copilot_request_handler.rs:758
https://github.com/copilot/cli/client-metadata.json tests/e2e/mcp_oauth.rs:25
https://alpha.example.test/v1 tests/e2e/multi_provider_registry.rs:34
https://beta.example.test tests/e2e/multi_provider_registry.rs:39
ahp-root:// tests/e2e/runtime_host_support.rs:23
https://github.com/github/copilot-sdk/issues/1234 tests/e2e/session.rs:1576
https://api.openai.com/v1 tests/e2e/session.rs:1738 tests/e2e/session.rs:1804
https://my-resource.openai.azure.com tests/e2e/session.rs:1766
https://anthropic-citations.invalid/v1 tests/e2e/session_config.rs:489
Listening: (http://[^\s]+)\s+(\{.*\})$ tests/e2e/support.rs:1329
http:// tests/e2e/support.rs:1559
http://unused.test tests/http_response_forwarding_test.rs:187 tests/http_response_forwarding_test.rs:347 tests/http_response_forwarding_test.rs:365 tests/http_response_forwarding_test.rs:419 tests/http_response_forwarding_test.rs:448
http://{}/stream tests/http_response_forwarding_test.rs:468
https://example.test/mcp tests/mcp_plan_transport_choice_test.rs:55
https://example.test/{} tests/session_test.rs:282
{"resource":"https://example.com/mcp"} tests/session_test.rs:947
https://example.com tests/session_test.rs:2945 tests/session_test.rs:2955 tests/session_test.rs:2965
https://example.test/counter tests/session_test.rs:6059
https://example.test/counter-updated tests/session_test.rs:6204

info url_literal library 24

ws://127.0.0.1:4321 src/ahp_host/tests.rs:150 src/ahp_host/tests.rs:156
http://127.0.0.1:4321 src/ahp_host/tests.rs:192
https://example.test/{} src/canvas.rs:192
https://example.test/echo src/canvas.rs:241
http://collector:4318 src/lib.rs:3443 src/lib.rs:3450 src/lib.rs:3483 src/lib.rs:3499 src/lib.rs:3547 src/lib.rs:3560
http://from-config:4318 src/lib.rs:3578
http://from-user-env:4318 src/lib.rs:3583 src/lib.rs:3590
file:///tmp/data.bin src/tool.rs:479
file:///tmp/report.pdf src/tool.rs:537
https://api.example.com/v1 src/types.rs:7091 src/types.rs:7109
https://example.openai.azure.com src/types.rs:7131
https://example.com/oauth/client-metadata.json src/types.rs:7278
https://api.example.com src/types.rs:7727 src/types.rs:7739 src/types.rs:7764
https://example.com/issues/7 src/types.rs:8150

info unsafe_code library 4

1 unsafe blocks, functions or impls src/embeddedcli.rs:421
21 unsafe blocks, functions or impls src/ffi.rs:55
3 unsafe blocks, functions or impls src/ffi/shutdown_tests.rs:17
12 unsafe blocks, functions or impls src/process_tree.rs:75

info unsafe_code test 3

2 unsafe blocks, functions or impls tests/cli_resolution_test.rs:35 tests/e2e/client_lifecycle.rs:259
7 unsafe blocks, functions or impls tests/e2e/support.rs:1089

Run: full

failed

The full build covers everything the earlier cargo check run did, so only the full run is shown.

Ended: agent reported the end
Guest: exit code 101
Run time: 1 min 9 s
VM restore: 60 ms
Payload: 12732 files, 287.4 MiB
Files opened: 16034

Processes 197

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 186 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	build --locked --offline	5 ms	1 min 9 s	25856
└rustc /usr/local/bin/rustc ×147	--crate-name libc --edition=2021 /cw/vendor/libc-0.2.189/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no -C debuginfo=2 --allow=unused_qualifications --warn=clippy::unnecessary_semicolon --allow=clippy::unnecessary_cast --warn=clippy::ptr_as_ptr --allow=clippy::non_minimal_cfg --allow=clippy::missing_safety_doc --warn=clippy::map_unwrap_or --warn=clippy::manual_assert --allow=clippy::identity_op --warn=clippy::explicit_iter_loop --cfg feature="default" --cfg feature="std" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("align", "const-extern-fn", "default", "extra_traits", "rustc-dep-of-std", "rustc-std-workspace-core", "std", "use_std"))	395 ms	1.1 s	0
└rustc /usr/local/bin/rustc ×7	--crate-name build_script_main --edition=2021 /cw/vendor/openssl-sys-0.9.117/build/main.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("aws-lc", "aws-lc-fips", "bindgen", "bssl-sys", "openssl-src", "unstable_boringssl", "vendored")) -C metadata=382f0c39eef1cf14 -C extra-filename=-9db41c071c247f6c --out-dir /work/target/debug/build/openssl-sys-9db41c071c247f6c -L dependency=/work/target/debug/deps --extern cc=/work/target/debug/deps/libcc-d2f014ceb86c8cd0.rlib --extern pkg_config=/work/target/debug/deps/libpkg_config-df4e365301e68a72.rlib --extern vcpkg=/work/target/debug/deps/libvcpkg-8e4474c5871a9cef.rlib --cap-lints allow	2.9 s	353 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/openssl-sys-9db41c071c247f6c/rustc9WuLjC/symbols.o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c.build_script_main.6032cb28ac8b50ca-cgu.0.rcgu.o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c.build_script_main.6032cb28ac8b50ca-cgu.1.rcgu.o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c.crh3byju91qwlu8z7x0s7rapk.rcgu.o -Wl,--as-needed -Wl,-Bstatic /work/target/debug/deps/libvcpkg-8e4474c5871a9cef.rlib /work/target/debug/deps/libpkg_config-df4e365301e68a72.rlib /work/target/debug/deps/libcc-d2f014ceb86c8cd0.rlib /work/target/debug/deps/libfind_msvc_tools-47d85dec6b12ba9f.rlib /work/target/debug/deps/libshlex-69c11c7589f0c135.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libo	3.1 s	152 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccVgQxys.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/openssl-sys-9db41c071c247f6c/rustc9WuLjC/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/	3.1 s	147 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccVgQxys.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/openssl-sys-9db41c071c247f6c/build_script_main-9db41c071c247f6c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/openssl-sys-9db41c071c247f6c/rustc9WuLjC/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64	3.1 s	143 ms	0
└build_script openssl-sys		3.3 s	75 ms	0
└other /usr/bin/pkg-config ×2	--libs --cflags openssl	3.3 s	2 ms	0
└toolchain /usr/bin/cc ×2	-E /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/5555588182395055806detect_compiler_family.c	3.3 s	26 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/5555588182395055806detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 5555588182395055806detect_compiler_family.c -dumpbase-ext .c	3.3 s	24 ms	0
└toolchain /usr/bin/cc	-?	3.3 s	3 ms	256
└toolchain /usr/bin/cc	-O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/flag_check -c /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/flag_check.c	3.3 s	31 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/flag_check.c -quiet -dumpdir /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccjdu8AN.s	3.3 s	24 ms	0
└toolchain /usr/bin/as	--64 -o /work/target/debug/build/openssl-sys-053c6ab03053bdf4/out/flag_check /tmp/ccjdu8AN.s	3.4 s	6 ms	0
└build_script openssl		5.3 s	2 ms	0
└build_script crc32fast		21.7 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	21.7 s	7 ms	0
└build_script native-tls		21.7 s	2 ms	0
└build_script httparse		22.9 s	8 ms	0
└rustc /usr/local/bin/rustc	--version	22.9 s	6 ms	0
└build_script native-tls		28.6 s	1 ms	0
└build_script serde_core		28.7 s	8 ms	0
└rustc /usr/local/bin/rustc	--version	28.7 s	6 ms	0
└build_script github-copilot-sdk		1 min 9 s	62 ms	25856

Network 2

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

Destination	Protocol	What was sent	Bytes
:443	tls	SNI github.com, inside TLS: GET /github/copilot-cli/releases/download/v1.0.92-0/github-copilot-1.0.92-0-linux-x64.tgz, host github.com, agent ureq/3.4.2	1.5 KiB

Sockets in the trace 3

When	Program	How	Address	Type
1 min 9 s	/work/target/debug/build/github-copilot-sdk-bf1d5682af43b580/build-script-build	connect	unix:/var/run/nscd/socket	stream
1 min 9 s	/work/target/debug/build/github-copilot-sdk-bf1d5682af43b580/build-script-build	connect	:53	datagram
1 min 9 s	/work/target/debug/build/github-copilot-sdk-bf1d5682af43b580/build-script-build	connect	:443	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 1174
Directories: 226
Size: 687.7 MiB
Compiled units: 295
Scan: stopped at a limit

Nothing outside the build areas.

Output

Standard error

   Compiling libc v0.2.189
   Compiling cfg-if v1.0.5
   Compiling bytes v1.12.1
   Compiling itoa v1.0.18
   Compiling pkg-config v0.3.34
   Compiling vcpkg v0.2.15
   Compiling openssl-sys v0.9.117
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling bitflags v2.13.2
   Compiling pin-project-lite v0.2.17
   Compiling yoke v0.8.3
   Compiling futures-core v0.3.34
   Compiling errno v0.3.14
   Compiling log v0.4.34
   Compiling zerovec v0.11.8
   Compiling signal-hook-registry v1.4.8
   Compiling socket2 v0.6.5
   Compiling mio v1.2.3
   Compiling openssl v0.10.81
   Compiling foreign-types-shared v0.1.1
   Compiling foreign-types v0.3.2
   Compiling tokio v1.53.1
   Compiling openssl-macros v0.1.1
   Compiling smallvec v1.16.2
   Compiling futures-sink v0.3.34
   Compiling http v1.5.0
   Compiling openssl-probe v0.2.1
   Compiling hashbrown v0.17.1
   Compiling typenum v1.20.1
   Compiling equivalent v1.0.2
   Compiling generic-array v0.14.7
   Compiling tinystr v0.8.4
   Compiling slab v0.4.12
   Compiling writeable v0.6.4
   Compiling percent-encoding v2.3.2
   Compiling litemap v0.8.3
   Compiling icu_locale_core v2.3.0
   Compiling serde_core v1.0.229
   Compiling zerotrie v0.2.5
   Compiling potential_utf v0.1.6
   Compiling zeroize v1.9.0
   Compiling utf8_iter v1.0.4
   Compiling icu_collections v2.3.0
   Compiling icu_provider v2.3.1
   Compiling block-buffer v0.10.4
   Compiling crypto-common v0.1.7
   Compiling adler2 v2.0.1
   Compiling native-tls v0.2.18
   Compiling once_cell v1.21.4
   Compiling futures-task v0.3.34
   Compiling futures-util v0.3.34
   Compiling tracing-core v0.1.36
   Compiling crc32fast v1.5.2
   Compiling digest v0.10.7
   Compiling httparse v1.10.1
   Compiling icu_normalizer_data v2.3.0
   Compiling icu_properties_data v2.3.0
   Compiling http-body v1.1.0
   Compiling tokio-util v0.7.19
   Compiling cpufeatures v0.2.17
   Compiling simd-adler32 v0.3.10
   Compiling tracing v0.1.44
   Compiling icu_properties v2.3.0
   Compiling icu_normalizer v2.3.0
   Compiling zerocopy v0.8.59
   Compiling getrandom v0.3.4
   Compiling indexmap v2.14.2
   Compiling fnv v1.0.7
   Compiling linux-raw-sys v0.12.1
   Compiling tower-service v0.3.3
   Compiling try-lock v0.2.5
   Compiling atomic-waker v1.1.2
   Compiling base64ct v1.8.3
   Compiling pem-rfc7468 v1.0.0
   Compiling h2 v0.4.19
   Compiling want v0.3.1
   Compiling rustix v1.1.5
   Compiling rand_core v0.9.5
   Compiling ppv-lite86 v0.2.21
   Compiling idna_adapter v1.2.2
   Compiling zmij v1.0.23
   Compiling miniz_oxide v0.9.1
   Compiling rustls-pki-types v1.15.1
   Compiling futures-channel v0.3.34
   Compiling memchr v2.8.3
   Compiling base64 v0.23.1
   Compiling option-ext v0.2.0
   Compiling zlib-rs v0.6.8
   Compiling bumpalo v3.20.3
   Compiling zopfli v0.8.3
   Compiling flate2 v1.1.10
   Compiling dirs-sys v0.4.1
   Compiling ureq-proto v0.6.4
   Compiling hyper v1.11.1
   Compiling webpki-root-certs v1.0.9
   Compiling idna v1.1.0
   Compiling rand_chacha v0.9.0
   Compiling xattr v1.6.1
   Compiling der v0.8.2
   Compiling tokio-native-tls v0.3.1
   Compiling form_urlencoded v1.2.2
   Compiling sync_wrapper v1.0.2
   Compiling filetime v0.2.29
   Compiling utf8-zero v0.8.1
   Compiling tower-layer v0.3.3
   Compiling ipnet v2.12.2
   Compiling typed-path v0.12.3
   Compiling zip v7.2.0
   Compiling hyper-util v0.1.21
   Compiling tower v0.5.3
   Compiling ureq v3.4.2
   Compiling thiserror v2.0.21
   Compiling tar v0.4.46
   Compiling url v2.5.8
   Compiling serde_json v1.0.151
   Compiling rand v0.9.5
   Compiling dirs v5.0.1
   Compiling aho-corasick v1.1.5
   Compiling sha1 v0.10.7
   Compiling sha2 v0.10.9
   Compiling http-body-util v0.1.5
   Compiling data-encoding v2.11.1
   Compiling regex-syntax v0.8.11
   Compiling scopeguard v1.2.0
   Compiling utf-8 v0.7.6
   Compiling tungstenite v0.28.0
   Compiling lock_api v0.4.14
   Compiling regex-automata v0.4.18
   Compiling hyper-tls v0.6.0
   Compiling github-copilot-sdk v1.0.17-preview.0
   Compiling tower-http v0.6.11
   Compiling getrandom v0.4.3
   Compiling parking_lot_core v0.9.12
   Compiling serde v1.0.229
   Compiling reqwest v0.13.5
   Compiling parking_lot v0.12.5
   Compiling uuid v1.26.1
warning: github-copilot-sdk@1.0.17-preview.0: Downloading https://github.com/github/copilot-cli/releases/download/v1.0.92-0/github-copilot-1.0.92-0-linux-x64.tgz
error: failed to run custom build command for `github-copilot-sdk v1.0.17-preview.0`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/github-copilot-sdk-bf1d5682af43b580/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=COPILOT_SKIP_CLI_DOWNLOAD
  cargo:rerun-if-env-changed=COPILOT_CLI_EXTRACT_DIR
  cargo:rerun-if-env-changed=BUNDLED_CLI_CACHE_DIR
  cargo::rustc-check-cfg=cfg(has_bundled_cli)
  cargo::rustc-check-cfg=cfg(has_extracted_cli)
  cargo:rerun-if-changed=cli-version.txt
  cargo:rerun-if-changed=cli-version-in-process.txt
  cargo:rustc-env=COPILOT_SDK_CLI_VERSION=1.0.92-0
  cargo:rustc-env=COPILOT_SDK_CLI_CACHE_ID=1.0.92-0
  cargo:warning=Downloading https://github.com/github/copilot-cli/releases/download/v1.0.92-0/github-copilot-1.0.92-0-linux-x64.tgz

  --- stderr

  thread 'main' (2138) panicked at /cw/vendor/github-copilot-sdk-1.0.17-preview.0/build/in_process.rs:999:25:
  Failed to download https://github.com/github/copilot-cli/releases/download/v1.0.92-0/github-copilot-1.0.92-0-linux-x64.tgz: HTTP 404 Not Found
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-10-01 21:58 UTC	Discovered	Fetched	fetched	fetcher-2372261
2026-10-01 21:58 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-2372263
2026-10-01 21:58 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-2445642-slot0
2026-10-01 21:58 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-2445642-slot0
2026-10-01 21:58 UTC	DynamicallyAnalyzed	ReadyForSandbox	scored	analyzer-2372276
2026-10-01 21:58 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-2445642-slot0
2026-10-01 22:00 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-2445642-slot0
2026-10-01 22:00 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-2372276
2026-10-01 22:00 UTC	Scored	Done	finalized	analyzer-2372276