Crateward

katana-render-runtime 0.4.22

Done dynamic on Linux job 55418 crates.io SBOM Findings (VEX) Compare with 0.4.21

high severity included_binary in build_script code (8 places): src/markdown/generated/zenuml-runtime-assets.bin.br (840248 bytes)

48
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
30static:included_binary
static · katana-render-runtime
build.rs:3high severity included_binary in build_script code (8 places): src/markdown/generated/zenuml-runtime-assets.bin.br (840248 bytes)
10network_lookup
network · v8
github.comThe build looked up github.com.
5exec_downloader
trace · v8
/usr/bin/curlThe build ran /usr/bin/curl.
3exec_interpreter
trace · v8
/usr/bin/python3The build ran /usr/bin/python3.
3 without points
SignalWhereWhat
static:build_script
static · katana-render-runtime
build.rslow severity build_script in build_script code: build.rs
static:obfuscated_data
static · katana-render-runtime
src/renderer/backends/html_runtime_image_lifecycle_tests.rs:166medium severity obfuscated_data in library code (2 places): <p id=status></p><img src="data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL/wAALCAAIAAgBAREA/8QAFAABAAAAAA…
static:yara:invisible_characters
static · katana-render-runtime
src/markdown/diagram_runtime/generated/drawio-runtime.min.js:4medium severity yara:invisible_characters in library code (3 places): Zero width or invisible characters, which can hide identifiers or payloads

Behavior

New since the previous version

static:obfuscated_data

Profile

exec:downloader exec:interpreter net:github.com static:included_binary static:obfuscated_data static:yara:invisible_characters

Static findings

9 groups
high included_binary build_script 1
  • src/markdown/generated/zenuml-runtime-assets.bin.br (840248 bytes) build.rs:3
medium included_binary library 7
medium yara_match invisible_characters library 3
medium obfuscated_data library 2
low network_access library 17
low process_spawn library 8
low build_script build_script 1
info url_literal library 241
info unsafe_code library 3

Run: check

failed
Ended
agent reported the end
Guest
exit code 101
Run time
1 min 55 s
VM restore
66 ms
Payload
30203 files, 517.1 MiB
Files opened
20132

Processes 306

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 5 ms 1 min 55 s 25856
└rustc /usr/local/bin/rustc ×29 --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --cfg feature="span-locations" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=c83ce984471a4e48 -C extra-filename=-5cb179a647ef6e51 --out-dir /work/target/debug/build/proc-macro2-5cb179a647ef6e51 -L dependency=/work/target/debug/deps --cap-lints allow 384 ms 729 ms 0
└toolchain /usr/bin/cc -m64 /work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustcvxxUvc/symbols.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.build_script_build.dfb9ac565abdb04-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.7zrad1clk47dffwz5ub8n8yx5.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libr 947 ms 162 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc6dXlov.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustcvxxUvc/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L 954 ms 155 ms 0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc6dXlov.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustcvxxUvc/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 957 ms 151 ms 0
└build_script proc-macro2 1.1 s 88 ms 0
└rustc /usr/local/bin/rustc ×3 --version 1.1 s 8 ms 0
└rustc /usr/local/bin/rustc --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-97392f29eb377993/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu 1.1 s 34 ms 256
└rustc /usr/local/bin/rustc ×149 --crate-name proc_macro2 --edition=2021 /cw/vendor/proc-macro2-1.0.107/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --cfg feature="span-locations" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=5d63f7a10747f6e2 -C extra-filename=-e838b6f4c830537c --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --extern unicode_ident=/work/target/debug/deps/libunicode_ident-76fddff3086055f2.rmeta 1.2 s 634 ms 0
└build_script libm 16.0 s 1 ms 0
└build_script libc 19.7 s 10 ms 0
└rustc /usr/local/bin/rustc --version 19.7 s 7 ms 0
└unknown 19.7 s 0 ms 32512
└build_script icu_locale_fallback_data 20.2 s 1 ms 0
└build_script prettyplease 20.2 s 1 ms 0
└build_script serde_core 20.2 s 10 ms 0
└rustc /usr/local/bin/rustc --version 20.2 s 7 ms 0
└build_script clang-sys 20.3 s 2 ms 0
└build_script num-traits 21.0 s 45 ms 0
└rustc /usr/local/bin/rustc ×3 --version --verbose 21.0 s 7 ms 0
└build_script serde 27.0 s 9 ms 0
└rustc /usr/local/bin/rustc --version 27.0 s 7 ms 0
└build_script rustix 27.1 s 21 ms 0
└rustc /usr/local/bin/rustc --crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o - - 27.1 s 17 ms 256
└build_script icu_calendar_data 28.2 s 2 ms 0
└build_script slotmap 29.5 s 25 ms 0
└rustc /usr/local/bin/rustc ×3 --verbose --version 29.5 s 8 ms 0
└build_script bindgen 32.0 s 1 ms 0
└build_script web_atoms 42.1 s 172 ms 0
└unknown ×3 42.3 s 0 ms 32512
└build_script httparse 47.3 s 10 ms 0
└rustc /usr/local/bin/rustc --version 47.3 s 7 ms 0
└build_script jni-macros 1 min 2 s 10 ms 0
└rustc /usr/local/bin/rustc -vV 1 min 2 s 7 ms 0
└build_script jni 1 min 17 s 2 ms 0
└build_script v8 1 min 19 s 35.2 s 25856
└other /usr/bin/python3 ./tools/download_file.py --url https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz --filename /work/target/debug/gn_out/obj/librusty_v8.tmp 1 min 19 s 35.1 s 256
└other /usr/bin/curl -L -f -s -o /work/target/debug/gn_out/obj/librusty_v8.tmp https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz 1 min 55 s 48 ms 5632

Network 6

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

DestinationProtocolWhat was sentBytes
:443tlsSNI github.com1.5 KiB
:443tlsSNI github.com1.5 KiB
:443tlsSNI github.com1.5 KiB
:443tlsSNI github.com1.5 KiB
:443tlsSNI github.com, inside TLS: GET /denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz, host github.com, agent curl/8.14.11.5 KiB
Sockets in the trace 6
WhenProgramHowAddressType
1 min 19 s/usr/bin/python3connectunix:/var/run/nscd/socketstream
1 min 19 s/usr/bin/python3connect:53datagram
1 min 19 s/usr/bin/python3connect:443stream
1 min 55 s/usr/bin/curlconnectunix:/var/run/nscd/socketstream
1 min 55 s/usr/bin/curlconnect:53datagram
1 min 55 s/usr/bin/curlconnect:443stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
1289
Directories
319
Size
649.0 MiB
Compiled units
212
Scan
stopped at a limit

Nothing outside the build areas.

Output

Standard error
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling syn v3.0.6
   Compiling synstructure v0.14.0
   Compiling zerofrom-derive v0.1.8
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
    Checking stable_deref_trait v1.2.1
    Checking yoke v0.8.3
   Compiling zerovec-derive v0.11.6
    Checking zerovec v0.11.8
   Compiling displaydoc v0.2.7
   Compiling syn v2.0.119
    Checking writeable v0.6.4
    Checking potential_utf v0.1.6
    Checking tinystr v0.8.4
    Checking litemap v0.8.3
    Checking icu_locale_core v2.3.0
   Compiling siphasher v1.0.4
   Compiling phf_shared v0.14.0
    Checking zerotrie v0.2.5
   Compiling bytemuck_derive v1.12.1
   Compiling fastrand v2.5.0
   Compiling libm v0.2.16
   Compiling phf_generator v0.14.0
    Checking bytemuck v1.25.2
    Checking icu_provider v2.3.1
   Compiling serde_derive v1.0.229
    Checking core_maths v0.1.1
    Checking simd-adler32 v0.3.10
   Compiling glob v0.3.4
   Compiling cfg-if v1.0.5
   Compiling num-traits v0.2.19
   Compiling libc v0.2.189
   Compiling clang-sys v1.9.1
   Compiling serde_core v1.0.229
   Compiling prettyplease v0.2.37
   Compiling icu_locale_fallback_data v2.3.0
   Compiling slotmap v1.1.1
    Checking parking_lot_core v0.9.12
    Checking serde v1.0.229
    Checking miniz_oxide v0.9.1
    Checking calendrical_calculations v0.2.4
   Compiling phf_macros v0.14.0
   Compiling string_cache_codegen v0.11.2
   Compiling phf_codegen v0.14.0
   Compiling minimal-lexical v0.2.1
   Compiling bitflags v2.13.2
   Compiling either v1.18.0
   Compiling icu_calendar_data v2.3.0
   Compiling memchr v2.8.3
    Checking new_debug_unreachable v1.0.6
   Compiling rustix v0.38.44
   Compiling regex-syntax v0.8.11
   Compiling regex-automata v0.4.18
   Compiling nom v7.1.3
    Checking icu_collections v2.3.0
    Checking flate2 v1.1.10
   Compiling web_atoms v0.3.0
    Checking phf v0.14.0
    Checking parking_lot v0.12.5
   Compiling libloading v0.8.9
    Checking resb v0.1.2
    Checking font-types v0.12.5
    Checking float-cmp v0.9.0
   Compiling linux-raw-sys v0.4.15
   Compiling bindgen v0.72.1
    Checking precomputed-hash v0.1.1
    Checking string_cache v0.11.0
    Checking strict-num v0.1.1
    Checking read-fonts v0.41.0
    Checking zoneinfo64 v0.3.0
    Checking icu_locale_fallback v2.3.0
   Compiling cexpr v0.6.0
   Compiling regex v1.13.1
   Compiling itertools v0.13.0
    Checking polycool v0.4.0
   Compiling crc32fast v1.5.2
    Checking miniz_oxide v0.8.9
    Checking fdeflate v0.3.7
   Compiling strck v1.0.0
   Compiling rustc-hash v2.1.3
   Compiling smallvec v1.16.2
   Compiling same-file v1.0.6
   Compiling log v0.4.34
   Compiling home v0.5.12
   Compiling shlex v1.3.0
   Compiling httparse v1.10.1
    Checking roxmltree v0.20.0
   Compiling alloc-no-stdlib v3.0.0
    Checking dtoa v1.0.11
   Compiling adler2 v2.0.1
    Checking dtoa-short v0.3.5
   Compiling alloc-stdlib v0.3.0
    Checking fontconfig-parser v0.5.8
   Compiling which v6.0.3
    Checking tiny-skia-path v0.12.0
   Compiling walkdir v2.5.0
   Compiling diplomat_core v0.16.1
    Checking png v0.18.1
   Compiling gzip-header v1.1.0
    Checking kurbo v0.13.1
    Checking icu_normalizer v2.3.0
    Checking icu_properties v2.3.0
    Checking icu_calendar v2.3.0
    Checking timezone_provider v0.2.6
   Compiling jni-macros v0.22.4
    Checking tendril v0.5.1
   Compiling fslock v0.2.1
   Compiling simdutf8 v0.1.5
    Checking quick-error v2.0.1
    Checking byteorder-lite v0.1.0
    Checking ixdtf v0.6.6
    Checking unicode-script v0.5.8
    Checking zune-core v0.5.3
    Checking weezl v0.1.12
    Checking color_quant v1.1.0
    Checking gif v0.14.2
    Checking zune-jpeg v0.5.15
    Checking fontdb v0.24.0
    Checking temporal_rs v0.2.6
    Checking image-webp v0.2.4
   Compiling simd_cesu8 v1.2.0
   Compiling v8 v152.2.0
    Checking markup5ever v0.40.0
    Checking idna_adapter v1.2.2
    Checking svgtypes v0.16.1
   Compiling diplomat v0.16.1
   Compiling jni v0.22.4
   Compiling brotli-decompressor v6.0.1
    Checking harfrust v0.12.0
    Checking skrifa v0.44.0
    Checking http v1.5.0
    Checking roxmltree v0.21.1
    Checking simplecss v0.2.2
   Compiling jni-sys-macros v0.4.1
   Compiling thiserror-impl v2.0.21
    Checking unicode-bidi v0.3.18
    Checking diplomat-runtime v0.16.0
    Checking unicode-vo v0.1.0
    Checking imagesize v0.15.0
    Checking pico-args v0.5.0
    Checking data-url v0.3.2
    Checking pxfm v0.1.30
    Checking xmlwriter v0.1.0
    Checking usvg v0.48.1
    Checking moxcms v0.8.1
    Checking rustls v0.23.45
    Checking temporal_capi v0.2.6
    Checking java-locator v0.1.9
    Checking thiserror v2.0.21
    Checking jni-sys v0.4.1
    Checking ureq-proto v0.6.4
   Compiling katana-render-runtime v0.4.22
    Checking idna v1.1.0
error: failed to run custom build command for `v8 v152.2.0`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/v8-8edb486d8d9ab5f7/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-changed=.gn
  cargo:rerun-if-changed=BUILD.gn
  cargo:rerun-if-changed=src/binding.cc
  cargo:rerun-if-env-changed=CCACHE
  cargo:rerun-if-env-changed=CLANG_BASE_PATH
  cargo:rerun-if-env-changed=CXXSTDLIB
  cargo:rerun-if-env-changed=DENO_TRYBUILD
  cargo:rerun-if-env-changed=DOCS_RS
  cargo:rerun-if-env-changed=GN
  cargo:rerun-if-env-changed=GN_ARGS
  cargo:rerun-if-env-changed=HOST
  cargo:rerun-if-env-changed=LIBCLANG_PATH
  cargo:rerun-if-env-changed=NINJA
  cargo:rerun-if-env-changed=OUT_DIR
  cargo:rerun-if-env-changed=RUSTY_V8_ARCHIVE
  cargo:rerun-if-env-changed=RUSTY_V8_ARCHIVE_SHA256
  cargo:rerun-if-env-changed=RUSTY_V8_BINDGEN_RESOURCE_DIR
  cargo:rerun-if-env-changed=RUSTY_V8_GLIBC_PREFIX
  cargo:rerun-if-env-changed=RUSTY_V8_MIRROR
  cargo:rerun-if-env-changed=RUSTY_V8_MIRROR_TAG
  cargo:rerun-if-env-changed=RUSTY_V8_MIRROR_FALLBACK
  cargo:rerun-if-env-changed=RUSTY_V8_MUSL_SYSROOT
  cargo:rerun-if-env-changed=RUSTY_V8_SKIP_DOWNLOAD
  cargo:rerun-if-env-changed=RUSTY_V8_SRC_BINDING_PATH
  cargo:rerun-if-env-changed=RUSTY_V8_SRC_BINDING_URL
  cargo:rerun-if-env-changed=SCCACHE
  cargo:rerun-if-env-changed=V8_FORCE_DEBUG
  cargo:rerun-if-env-changed=V8_FROM_SOURCE
  cargo:rerun-if-env-changed=PYTHON
  cargo:rerun-if-env-changed=DISABLE_CLANG
  cargo:rerun-if-env-changed=EXTRA_GN_ARGS
  cargo:rerun-if-env-changed=PRINT_GN_ARGS
  cargo:rerun-if-env-changed=CARGO_ENCODED_RUSTFLAGS
  cargo:rustc-link-lib=static=rusty_v8
  lockfile: "/work/target/debug/build/v8.fslock"
  cargo:rustc-env=RUSTY_V8_SRC_BINDING_PATH=/cw/vendor/v8-152.2.0/gen/src_binding_release_x86_64-unknown-linux-gnu.rs
  cargo:rustc-link-search=/work/target/debug/gn_out/obj
  static lib URLs: ["https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz"]
  Trying to fetch from https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
  Looking for download in '"/work/home/.cargo/.rusty_v8/v152_2_0_librusty_v8_release_x86_64_unknown_linux_gnu_a_gz"'
  Looking for download in '"/work/home/.cargo/.rusty_v8/https___github_com_denoland_rusty_v8_releases_download_v152_2_0_librusty_v8_release_x86_64_unknown_linux_gnu_a_gz"'
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
  Trying with Python...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 5 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 10 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Retrying in 20 s ...
  Downloading https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
  <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
  Python downloader failed, trying with curl.
  Failed to fetch from https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz: no downloader (deno, python, curl) could fetch the URL

  --- stderr
  Traceback (most recent call last):
    File "/usr/lib/python3.13/urllib/request.py", line 1319, in do_open
      h.request(req.get_method(), req.selector, req.data, headers,
      ~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                encode_chunked=req.has_header('Transfer-encoding'))
                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1367, in request
      self._send_request(method, url, body, headers, encode_chunked)
      ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1413, in _send_request
      self.endheaders(body, encode_chunked=encode_chunked)
      ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1362, in endheaders
      self._send_output(message_body, encode_chunked=encode_chunked)
      ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1122, in _send_output
      self.send(msg)
      ~~~~~~~~~^^^^^
    File "/usr/lib/python3.13/http/client.py", line 1066, in send
      self.connect()
      ~~~~~~~~~~~~^^
    File "/usr/lib/python3.13/http/client.py", line 1508, in connect
      self.sock = self._context.wrap_socket(self.sock,
                  ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^
                                            server_hostname=server_hostname)
                                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/ssl.py", line 455, in wrap_socket
      return self.sslsocket_class._create(
             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
          sock=sock,
          ^^^^^^^^^^
      ...<5 lines>...
          session=session
          ^^^^^^^^^^^^^^^
      )
      ^
    File "/usr/lib/python3.13/ssl.py", line 1076, in _create
      self.do_handshake()
      ~~~~~~~~~~~~~~~~~^^
    File "/usr/lib/python3.13/ssl.py", line 1372, in do_handshake
      self._sslobj.do_handshake()
      ~~~~~~~~~~~~~~~~~~~~~~~~~^^
  ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)

  During handling of the above exception, another exception occurred:

  Traceback (most recent call last):
    File "/cw/vendor/v8-152.2.0/./tools/download_file.py", line 63, in <module>
      sys.exit(main())
               ~~~~^^
    File "/cw/vendor/v8-152.2.0/./tools/download_file.py", line 58, in main
      DownloadUrl(args.url, f)
      ~~~~~~~~~~~^^^^^^^^^^^^^
    File "/cw/vendor/v8-152.2.0/./tools/download_file.py", line 44, in DownloadUrl
      raise e
    File "/cw/vendor/v8-152.2.0/./tools/download_file.py", line 28, in DownloadUrl
      response = urlopen(url)
    File "/usr/lib/python3.13/urllib/request.py", line 189, in urlopen
      return opener.open(url, data, timeout)
             ~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/urllib/request.py", line 489, in open
      response = self._open(req, data)
    File "/usr/lib/python3.13/urllib/request.py", line 506, in _open
      result = self._call_chain(self.handle_open, protocol, protocol +
                                '_open', req)
    File "/usr/lib/python3.13/urllib/request.py", line 466, in _call_chain
      result = func(*args)
    File "/usr/lib/python3.13/urllib/request.py", line 1367, in https_open
      return self.do_open(http.client.HTTPSConnection, req,
             ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                          context=self._context)
                          ^^^^^^^^^^^^^^^^^^^^^^
    File "/usr/lib/python3.13/urllib/request.py", line 1322, in do_open
      raise URLError(err)
  urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>

  thread 'main' (2152) panicked at /cw/vendor/v8-152.2.0/build.rs:1285:5:
  Failed to fetch the V8 prebuilt artifact /work/target/debug/gn_out/obj/librusty_v8.a. Tried:
  - https://github.com/denoland/rusty_v8/releases/download/v152.2.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz: no downloader (deno, python, curl) could fetch the URL
  If no prebuilt artifact is published for your target or version, compile V8 from source by setting V8_FROM_SOURCE=1. You can also point the build at an artifact via RUSTY_V8_ARCHIVE (static lib), a binding via RUSTY_V8_SRC_BINDING_URL or RUSTY_V8_SRC_BINDING_PATH (src binding only), a mirror via RUSTY_V8_MIRROR, or another release tag via RUSTY_V8_MIRROR_TAG.
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

6
WhenFromToEventWorker
2026-10-02 01:09 UTCDiscoveredFetchedfetchedfetcher-2372261
2026-10-02 01:09 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-2372263
2026-10-02 01:12 UTCReadyForSandboxRunningsandbox_startedorchestrator-2445642-slot1
2026-10-02 01:14 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-2445642-slot1
2026-10-02 01:14 UTCDynamicallyAnalyzedScoredscoredanalyzer-2372276
2026-10-02 01:14 UTCScoredDonefinalizedanalyzer-2372276