Skip to content
Open-Source Registry

cargo / caj2pdf-cli / 0.8.1

caj2pdf-cli 0.8.1

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
460
operations
14K
packages
67
compiler runs
54
connections
3
job time
50s
capture
196 KB
records
26K
bytes / record
7.6

Build behaviourits build script reached github.com, release-assets.githubusercontent.comits build script ran curlundeclared fetchfetch went into the outputfetched outside crates.io

run 5cbf6576-9668-4475-88cc-b9e2ef670883 · built 2026-10-12 · complete

Artifact

binary · retained · product · graph v2
1

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build code opened a network connection
    caj2pdf-cli 0.8.1 › github.com:443, release-assets.githubusercontent.com:443
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
caj2pdf-cli 0.8.1
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
caj2pdf-5e15e93869977601build
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by curl

    subject github.com:443

    by curl --fail --location --silent --show-error --retry 3 --connect-timeout 30 --max-time 600 --max-filesize 61493200 --output /home/runner/work/caj2pdf-rust/caj2p…

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by curl

    subject release-assets.githubusercontent.com:443

    by curl --fail --location --silent --show-error --retry 3 --connect-timeout 30 --max-time 600 --max-filesize 61493200 --output /home/runner/work/caj2pdf-rust/caj2p…

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/caj2pdf-rust/caj2pdf-rust/target/release/build/caj2pdf-cli-1a16f2cc4f144f13/build-script-build

Processes

build-test

cargo›cargo›build-script-build›curl

Ran
curl --fail --location --silent --show-error --retry 3 --connect-timeout 30 --max-time 600 --max-filesize 61493200 --output /home/runner/work/caj2pdf-rust/caj2p…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2446
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2446
  3. build-script-build/home/runner/work/caj2pdf-rust/caj2pdf-rust/target/release/build/caj2pdf-cli-1a16f2cc4f144f13/build-script-build3379
  4. curlcurl --fail --location --silent --show-error --retry 3 --connect-timeout 30 --max-time 600 --max-filesize 61493200 --output /home/runner/work/caj2pdf-rust/caj2p…3380

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Network

3 peers
  • github.com:443 caj2pdf-cli's own build code · curl · GitHub, Inc. · 1 file · went into an output undeclared
  • release-assets.githubusercontent.com:443 caj2pdf-cli's own build code · curl · Fastly, Inc. · 1 file · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (caj2pdf-rust) via crates.io · 3,739 files · went into an output ecosystem
Dependencies67Build behaviour
aes0.9.2
anstyle1.0.14
base640.23.1
bitflags2.13.2
block-buffer0.12.1
caj2pdf-core0.8.1
cfg-if1.0.5
cipher0.5.2
clap4.6.7
clap_builder4.6.7
clap_derive4.6.7proc macro
clap_lex1.1.1
cpubits0.1.1
cpufeatures0.3.1
crc32fast1.5.2build script
crypto-common0.2.2
digest0.11.3
errno0.3.14
fastrand2.5.0
flate21.1.10
heck0.5.0
hybrid-array0.4.15
inout0.2.2
itoa1.0.18
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
md-50.11.0
memchr2.8.3
miniz_oxide0.9.1
once_cell1.21.4
proc-macro21.0.107build script
quick-xml0.42.0
quote1.0.47build script
rustix1.1.5build script
same-file1.0.6
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
sha10.11.0
sha20.11.0
signal-hook0.4.5build script
signal-hook-registry1.4.8
simd-adler320.3.10
syn3.0.6
tempfile3.27.0
typenum1.20.1
unicode-ident1.0.26
xberg-ttf-parser1.1.0
zeroize1.9.1
zmij1.0.23build script
adler22.0.1
block20.6.2
cfg_aliases0.2.2
ctrlc3.5.2
dispatch20.3.1
nix0.31.3build script, not run
objc20.6.4build script, not run
objc2-encode4.1.0
winapi-util0.1.11
windows-link0.2.1
windows-sys0.61.2

Raw data

capture
196 KB
records
25,962
bytes per record
7.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run 5cbf6576-9668-4475-88cc-b9e2ef670883

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2