Build code opened a network connection
Unexpected network connection
- Subject
- baracuda-cutlass-sys 0.0.1-alpha.94
- Destination
- github.com:443
- Reaches
- Jobs
- build-test
- Rule
- egress
Evidence
Connection outside the process’s allowed destinationscause
connection to github.com:443, opened by git-remote-http
subject github.com:443
by /usr/lib/git-core/git-remote-https origin https://github.com/NVIDIA/cutlass.git
Connection opened by a build script or child processsupport
the opener descends from the build script at /home/runner/work/baracuda/baracuda/target/release/build/baracuda-cutlass-sys-51484978ecd5bcfc/build_script_build-51484978ecd5bcfc
Processes
build-test
cargo›cargo›build-script-build›git›git›git-remote-https
- Ran
- /usr/lib/git-core/git-remote-https origin https://github.com/NVIDIA/cutlass.git
- Invoked by
- cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 6 processes
- cargocargo build --release --locked --message-format=json-render-diagnostics2453
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2453
- build-script-build/home/runner/work/baracuda/baracuda/target/release/build/baracuda-cutlass-sys-51484978ecd5bcfc/build-script-build2522
- gitgit clone --depth 1 --filter=blob:none --sparse --no-recurse-submodules --branch v4.2.0 https://github.com/NVIDIA/cutlass.git /home/runner/.baracuda-cutlass-sys…2527
- git/usr/lib/git-core/git remote-https origin https://github.com/NVIDIA/cutlass.git2524
- git-remote-https/usr/lib/git-core/git-remote-https origin https://github.com/NVIDIA/cutlass.git2526
Remediation
Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.
