Skip to content
Open-Source Registry

cargo / aegis-seal-gateway / 1.0.1-beta

aegis-seal-gateway 1.0.1-beta

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnshigh
processes
766
operations
136K
packages
393
compiler runs
1,757
connections
3
job time
5m 41s
capture
1.4 MB
records
224K
bytes / record
6.2

Build behaviourhas a build scriptundeclared fetchfetched outside crates.iocompiled C/C++

run 9799475b-7791-4f46-871e-035b404e4784 · built 2026-10-17 · complete View on crates.io

Graph

egress · medium · in aegis-seal-gateway
2

Checks

10 of 14 clear Network activity Known vulnerabilities +2 more
Build behavior▲✓✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓

Detections

1
  • Build script reached codeload.github.com +1
    utoipa-swagger-ui 9.0.2 › github.com:443, codeload.github.com:443
    medium

Detection

mediumwitnessed

Build script reached codeload.github.com +1

Unexpected network connection

Subject
utoipa-swagger-ui 9.0.2
Destination
github.com:443, codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl -sSL -o /home/runner/work/aegis-seal-gateway/aegis-seal-gateway/target/release/build/utoipa-swagger-ui-61fda53162131b35/out/v5.17.14.zip https://github.com…

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by curl

    subject codeload.github.com:443

    by curl -sSL -o /home/runner/work/aegis-seal-gateway/aegis-seal-gateway/target/release/build/utoipa-swagger-ui-61fda53162131b35/out/v5.17.14.zip https://github.com…

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/aegis-seal-gateway/aegis-seal-gateway/target/release/build/utoipa-swagger-ui-ceb64152d0794fb3/build-script-build

  5. Tool commandsupport

    Command: curl -sSL -o /home/runner/work/aegis-seal-gateway/aegis-seal-gateway/target/release/build/utoipa-swagger-ui-61fda53162131b35/out/v5.17.14.zip https://github.com…

    by curl -sSL -o /home/runner/work/aegis-seal-gateway/aegis-seal-gateway/target/release/build/utoipa-swagger-ui-61fda53162131b35/out/v5.17.14.zip https://github.com…

In aegis-seal-gateway

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl -sSL -o /home/runner/work/aegis-seal-gateway/aegis-seal-gateway/target/release/build/utoipa-swagger-ui-61fda53162131b35/out/v5.17.14.zip https://github.com…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2479
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2479
  3. build-script-build/home/runner/work/aegis-seal-gateway/aegis-seal-gateway/target/release/build/utoipa-swagger-ui-ceb64152d0794fb3/build-script-build8717
  4. curlcurl -sSL -o /home/runner/work/aegis-seal-gateway/aegis-seal-gateway/target/release/build/utoipa-swagger-ui-61fda53162131b35/out/v5.17.14.zip https://github.com…8720

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

3 peers
  • codeload.github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • github.com:443 build code of utoipa-swagger-ui · curl · GitHub, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (aegis-seal-gateway) via crates.io · 26,263 files · went into an output ecosystem
Vulnerabilities5PackageFixSeverity
RUSTSEC-2026-0346rustls 0.23.45>=0.23.46high
RUSTSEC-2026-0347rustls 0.23.45>=0.23.46high
RUSTSEC-2026-0348rustls 0.23.45>=0.23.46high
RUSTSEC-2026-0349rustls 0.23.45>=0.23.46high
RUSTSEC-2024-0449unsafe-libyaml 0.2.11none publishedlow
Dependencies430Build behaviour
aegis-orchestrator-proto1.0.1-betabuild script
allocator-api20.2.21
anyhow1.0.104build script
atoi2.0.0
atomic-waker1.1.2
aws-lc-rs1.18.1build script
aws-lc-sys0.45.0build scriptprebuilt objects
axum0.8.8
axum-core0.5.6
base640.22.1
bitflags2.11.0
block-buffer0.10.4
byteorder1.5.0
bytes1.11.1
cfg-if1.0.4
chrono0.4.44
cpufeatures0.2.17
crc3.4.0
crc-catalog2.4.0
crossbeam-epoch0.9.20build script
crossbeam-queue0.3.12
crossbeam-utils0.8.21build script
crypto-common0.1.7
curve25519-dalek4.1.3build script
deranged0.5.8
derive_builder0.20.2
digest0.10.7
dirs6.0.0
dirs-sys0.5.0
dotenvy0.15.7
ed255192.2.3
ed25519-dalek2.2.0
either1.15.0
equivalent1.0.2
errno0.3.14
event-listener5.4.2
flume0.11.1
fnv1.0.7
foldhash0.1.5
form_urlencoded1.2.2
futures0.3.32
futures-channel0.3.32
futures-core0.3.32
futures-executor0.3.32
futures-intrusive0.5.0
futures-io0.3.32
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
generic-array0.14.7build script
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.2build script
h20.4.19
handlebars6.4.0
hashbrown0.15.5
hashbrown0.16.1
hashlink0.10.0
hex0.4.3
hkdf0.12.4
hmac0.12.1
home0.5.12
http1.4.0
http-body1.0.1
http-body-util0.1.3
httparse1.10.1build script
httpdate1.0.3
hyper1.9.0
hyper-rustls0.27.7
hyper-timeout0.5.2
hyper-util0.1.20
iana-time-zone0.1.65
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_normalizer_data2.2.0build script
icu_properties2.2.0
icu_properties_data2.2.0build script
icu_provider2.2.0
idna1.1.0
idna_adapter1.2.1
indexmap2.13.0
ipnet2.12.0
iri-string0.7.12
itoa1.0.18
jsonpath_lib0.3.0
jsonwebtoken10.3.0
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.184build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libsqlite3-sys0.30.1build script
litemap0.8.2
lock_api0.4.14
log0.4.29
matchers0.2.0
matchit0.8.4
md-50.10.6
memchr2.8.0
metrics0.24.6
metrics-exporter-prometheus0.16.2
metrics-util0.19.1
mime0.3.17
mime_guess2.0.5build script
mio1.2.0
nu-ansi-term0.50.3
num-bigint0.4.6
num-conv0.2.1
num-integer0.1.46
num-modular0.6.1
num-order1.2.0
num-traits0.2.19build script
once_cell1.21.4
option-ext0.2.0
parking2.2.1
parking_lot0.12.5
parking_lot_core0.9.12build script
pem3.0.6
percent-encoding2.3.2
pest2.8.6
pin-project1.1.11
pin-project-lite0.2.17
potential_utf0.1.5
powerfmt0.2.0
ppv-lite860.2.21
prost0.14.3
prost-types0.14.3
quanta0.12.6
rand0.8.8
rand0.9.5
rand_chacha0.3.1
rand_chacha0.9.0
rand_core0.6.4
rand_core0.9.5
rand_xoshiro0.7.0
rapidhash4.4.1
raw-cpuid11.6.0
regex-automata0.4.14
regex-syntax0.8.10
reqwest0.12.28
ring0.17.14build scriptprebuilt objects
rust-embed8.11.0
rust-embed-utils8.11.0
rustls0.23.45build script
rustls-pki-types1.14.0
rustls-webpki0.103.15
ryu1.0.23
same-file1.0.6
scopeguard1.2.0
serde1.0.228build script
serde_core1.0.228build script
serde_json1.0.149build script
serde_path_to_error0.1.20
serde_urlencoded0.7.1
serde_yaml0.9.34+deprecated
sha20.10.9
sharded-slab0.1.7
signal-hook-registry1.4.8
signature2.2.0
simple_asn10.6.4
sketches-ddsketch0.3.1
slab0.4.12
smallvec1.15.1
socket20.6.3
spin0.9.9
sqlx0.8.6
sqlx-core0.8.6
sqlx-postgres0.8.6
sqlx-sqlite0.8.6
stable_deref_trait1.2.1
stringprep0.1.5
subtle2.6.1
sync_wrapper1.0.2
thiserror1.0.69build script
thiserror2.0.18build script
thread_local1.1.9
time0.3.47
time-core0.1.8
tinystr0.8.3
tinyvec1.11.0
tinyvec_macros0.1.1
tokio1.50.0
tokio-rustls0.26.4
tokio-stream0.1.18
tokio-util0.7.18
tonic0.14.5
tonic-prost0.14.5
tower0.5.3
tower-http0.6.8
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
try-lock0.2.5
typenum1.19.0build script
ucd-trie0.1.7
unicase2.9.0
unicode-bidi0.3.18
unicode-normalization0.1.25
unicode-properties0.1.4
unsafe-libyaml0.2.11
untrusted0.7.1
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
utoipa5.4.0
utoipa-swagger-ui9.0.2build scriptnetworkruns toolscodeload.github.com, github.com, curl
uuid1.23.0
walkdir2.5.0
want0.3.1
webpki-roots0.26.11
webpki-roots1.0.6
whoami1.6.1
writeable0.6.2
yoke0.8.2
zerocopy0.8.48build script
zerofrom0.1.7
zeroize1.8.2
zerotrie0.2.4
zerovec0.11.6
zmij1.0.21build script
aho-corasick1.1.4
base640.23.1
pem4.0.0
rcgen0.14.10
unicode-ident1.0.24
yasna0.6.0
adler22.0.1
android_system_properties0.1.5
arbitrary1.4.2
asn1-rs0.7.2
asn1-rs-derive0.6.0proc macro
asn1-rs-impl0.2.0proc macro
async-trait0.1.89proc macro
autocfg1.5.0
axum-macros0.5.0proc macro
base64ct1.8.3
bit-vec0.9.1
bumpalo3.20.2
cc1.2.58
cfg_aliases0.2.1
chacha200.10.2
cmake0.1.58
const-oid0.9.6
core-foundation-sys0.8.7
cpufeatures0.3.1
crc32fast1.5.0build script
curve25519-dalek-derive0.1.1proc macro
darling0.20.11
darling_core0.20.11
darling_macro0.20.11proc macro
data-encoding2.11.1
der0.7.10
der-parser10.0.0
derive_arbitrary1.4.2proc macro
derive_builder_core0.20.2
derive_builder_macro0.20.2proc macro
displaydoc0.2.5proc macro
dunce1.0.5
etcetera0.8.0
fastrand2.3.0
fiat-crypto0.2.9
find-msvc-tools0.1.9
fixedbitset0.5.7
flate21.1.9
fs_extra1.3.0
futures-macro0.3.32proc macro
heck0.5.0
iana-time-zone-haiku0.1.2build script, not run
id-arena2.3.0
ident_case1.0.1
itertools0.14.0
jobserver0.1.35
js-sys0.3.94
leb128fmt0.1.0
libm0.2.16build script, not run
libredox0.1.15
linux-raw-sys0.12.1
lru-slab0.1.2
minimal-lexical0.2.1
miniz_oxide0.8.9
multimap0.10.1
nom7.1.3
num-bigint-dig0.8.6build script, not run
num-iter0.1.45
oid-registry0.8.1build script, not run
pem-rfc74680.7.0
pest_derive2.8.6proc macro
pest_generator2.8.6
pest_meta2.8.6
petgraph0.8.3
pin-project-internal1.1.11proc macro
pkcs10.7.5
pkcs80.10.2
pkg-config0.3.32
plain0.2.3
portable-atomic1.13.1build script, not run
prettyplease0.2.37build script
proc-macro21.0.106build script
prost-build0.14.3
prost-derive0.14.3proc macro
protoc-bin-vendored3.2.0
protoc-bin-vendored-linux-aarch_643.2.0
protoc-bin-vendored-linux-ppcle_643.2.0
protoc-bin-vendored-linux-s390_643.2.0
protoc-bin-vendored-linux-x86_323.2.0
protoc-bin-vendored-linux-x86_643.2.0
protoc-bin-vendored-macos-aarch_643.2.0
protoc-bin-vendored-macos-x86_643.2.0
protoc-bin-vendored-win323.2.0
pulldown-cmark0.13.3build script
pulldown-cmark-to-cmark22.0.0
quinn0.11.9build script, not run
quinn-proto0.11.17
quinn-udp0.5.14build script, not run
quote1.0.45build script
r-efi5.3.0
r-efi6.0.0
rand0.10.2
rand_core0.10.1
rand_pcg0.10.2
redox_syscall0.5.18
redox_syscall0.7.3
redox_users0.5.2
regex1.12.3
rsa0.9.10
rust-embed-impl8.11.0proc macro
rustc-hash2.1.2
rustc_version0.4.1
rusticata-macros4.1.0
rustix1.1.4build script
rustversion1.0.22build scriptproc macro
semver1.0.27
serde_derive1.0.228proc macro
sha10.10.6
shlex1.3.0
simd-adler320.3.9
spki0.7.3
sqlx-macros0.8.6proc macro
sqlx-macros-core0.8.6
sqlx-mysql0.8.6
strsim0.11.1
syn2.0.117
synstructure0.13.2
tempfile3.27.0
thiserror-impl1.0.69proc macro
thiserror-impl2.0.18proc macro
time-macros0.2.27proc macro
tokio-macros2.6.1proc macro
tonic-build0.14.5
tonic-prost-build0.14.5
tracing-attributes0.1.31proc macro
unicode-xid0.2.6
utoipa-gen5.4.0proc macro
valuable0.1.1build script, not run
vcpkg0.2.15prebuilt objects
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.2+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasite0.1.0
wasm-bindgen0.2.117build script, not run
wasm-bindgen-futures0.4.67
wasm-bindgen-macro0.2.117proc macro
wasm-bindgen-macro-support0.2.117
wasm-bindgen-shared0.2.117build script, not run
wasm-encoder0.244.0
wasm-metadata0.244.0
wasmparser0.244.0
web-sys0.3.94
web-time1.1.0
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.48.5build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.48.5build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.48.5build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.48.5build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.48.5build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.48.5build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.48.5build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
wit-bindgen0.51.0build script, not runprebuilt objects
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0build script, not run
wit-bindgen-rust-macro0.51.0build script, not runproc macro
wit-component0.244.0
wit-parser0.244.0
x509-parser0.18.1
yoke-derive0.8.2proc macro
zerocopy-derive0.8.48proc macro
zerofrom-derive0.1.7proc macro
zerovec-derive0.11.3proc macro
zip3.0.0
zlib-rs0.6.3
zopfli0.8.3
Versions2RiskVulnsPublished
0.15.0-pre-alphanot analyzed2026-04-10
1.0.1-betamediumhigh

Raw data

capture
1.4 MB
records
224,054
bytes per record
6.2

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-17 · run 9799475b-7791-4f46-871e-035b404e4784

analysis 0.1.0 · 2026-10-16 · e987d53 · graph v2