Skip to content
Open-Source Registry

cargo / atlas-sys

atlas-sys 0.47.0

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 2 detections
processes
473
operations
395K
packages
49
compiler runs
1
connections
3
job time
6m 07s
capture
1.1 MB
records
480K
bytes / record
2.2

Build-only crate for ECMWF atlas (grid/mesh library)

Build behaviourits build script reached codeload.github.com, github.comits build script ran gitundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

11 downloads · Apache-2.0 · published 2026-10-14 · source · crates.io ecmwfgeogridmeteorologyweather

Graph

egress · high · in libatlas_sys.rlib
3

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

2
  • Build script fetched what the build compiled, linked or ran
    atlas-sys 0.47.0 › github.com:443, codeload.github.com:443
    high
  • Build script fetched what the build compiled, linked or ran
    eckit-sys 2.5.0 › github.com:443
    high

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
atlas-sys 0.47.0
Destination
github.com:443, codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress · target/release/build/atlas-sys-4dba46344bf01eef/out/src/atlas

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by cmake

    subject github.com:443

    by cmake -DCMAKE_MODULE_PATH=/home/runner/work/atlas/atlas/target/release/build/atlas-sys-4dba46344bf01eef/out/src/ecbuild/cmake -DCMAKE_INSTALL_PREFIX=/home/runne…

  2. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by cmake

    subject codeload.github.com:443

    by cmake -DCMAKE_MODULE_PATH=/home/runner/work/atlas/atlas/target/release/build/atlas-sys-4dba46344bf01eef/out/src/ecbuild/cmake -DCMAKE_INSTALL_PREFIX=/home/runne…

  3. What a build script's fetch becamesupport

    644 files came down; the build compiled or linked pocketfft_hdronly.h, CheckSymbolExists.c, CheckSymbolExists.c +8 more

  4. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/atlas/atlas/target/release/build/atlas-sys-3bf18b0babc6aa36/build-script-build

  5. Tool commandsupport

    Command: cmake -DCMAKE_MODULE_PATH=/home/runner/work/atlas/atlas/target/release/build/atlas-sys-4dba46344bf01eef/out/src/ecbuild/cmake -DCMAKE_INSTALL_PREFIX=/home/runne…

    by cmake -DCMAKE_MODULE_PATH=/home/runner/work/atlas/atlas/target/release/build/atlas-sys-4dba46344bf01eef/out/src/ecbuild/cmake -DCMAKE_INSTALL_PREFIX=/home/runne…

In libatlas_sys.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›bash›cmake

Ran
cmake -DCMAKE_MODULE_PATH=/home/runner/work/atlas/atlas/target/release/build/atlas-sys-4dba46344bf01eef/out/src/ecbuild/cmake -DCMAKE_INSTALL_PREFIX=/home/runne…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 5 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2449
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2449
  3. build-script-build/home/runner/work/atlas/atlas/target/release/build/atlas-sys-3bf18b0babc6aa36/build-script-build6106
  4. bash/bin/bash --noprofile /home/runner/work/atlas/atlas/target/release/build/atlas-sys-4dba46344bf01eef/out/src/ecbuild/bin/ecbuild --prefix=/home/runner/work/atlas…6138
  5. cmakecmake -DCMAKE_MODULE_PATH=/home/runner/work/atlas/atlas/target/release/build/atlas-sys-4dba46344bf01eef/out/src/ecbuild/cmake -DCMAKE_INSTALL_PREFIX=/home/runne…6159

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
eckit-sys 2.5.0
Destination
github.com:443
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by git-remote-http

    subject github.com:443

    by /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

  2. What a build script's fetch becamesupport

    4611 files came down; the build compiled or linked dso1.c, dso2.c, main.c +1617 more and ran ecbuild, ecbuild

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/atlas/atlas/target/release/build/eckit-sys-5cd82dbb706fc24d/build_script_build-5cd82dbb706fc24d

  4. Tool commandsupport

    Command: /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

    by /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

What came before it

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›git›git›git-remote-https

Ran
/usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 6 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2449
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2449
  3. build-script-build/home/runner/work/atlas/atlas/target/release/build/eckit-sys-5cd82dbb706fc24d/build-script-build3175
  4. gitgit clone --depth 1 --branch 3.13.1 https://github.com/ecmwf/ecbuild.git /home/runner/work/atlas/atlas/target/release/build/eckit-sys-6fc6e60d8a2f4443/out/src/e…3213
  5. git/usr/lib/git-core/git remote-https origin https://github.com/ecmwf/ecbuild.git3177
  6. git-remote-https/usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git3180

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

4 peers
  • codeload.github.com:443 atlas-sys's own build code · cmake (target/release/build/atlas-sys-4dba46344bf01eef/out/src/atlas) · GitHub, Inc. · 644 files · went into an output undeclared
  • github.com:443 build code of eckit-sys · cmake (target/release/build/atlas-sys-4dba46344bf01eef/out/src/atlas); git-remote-http · GitHub, Inc. · 4,611 files · went into an output undeclared
  • github.com:443 atlas-sys's own build code · cmake · 644 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (atlas) via crates.io · 2,610 files · went into an output ecosystem
Dependencies50Build behaviour
aho-corasick1.1.5
bindman0.2.0proc macro
bindman-build0.2.0
bindman-utils0.2.0
cc1.8.0
codespan-reporting0.13.1
cxx1.0.205build script
cxx-build1.0.205
cxxbridge-flags1.0.205
cxxbridge-macro1.0.205proc macro
eckit-sys2.5.0build scriptnetworkruns toolsgithub.com, git
equivalent1.0.3
find-msvc-tools0.1.14
foldhash0.2.0
hashbrown0.17.1
heck0.5.0
indexmap2.14.2
itoa1.0.18
ld-linux-x86-64.so.2system library
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
link-cplusplus1.0.12build script
log0.4.34
memchr2.8.3
proc-macro21.0.107build script
quote1.0.47build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
scratch1.0.9build script
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
shlex2.0.1
syn2.0.119
syn3.0.9
termcolor1.4.1
tree-sitter0.23.2build script
tree-sitter-cpp0.23.4build script
tree-sitter-language0.1.9build script
tree-sitter-rust0.23.3build script
unicode-ident1.0.27
unicode-width0.2.2
winapi-util0.1.11
windows-link0.2.1
windows-sys0.61.2
zmij1.0.23build script

Raw data

capture
1.1 MB
records
479,644
bytes per record
2.2

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run 3cbefdd7-18a8-4cee-ae44-790a353910b1

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2