Build script reached downloads.tangerina.io
Unexpected network connection
- Subject
- deformable 0.1.0
- Destination
- downloads.tangerina.io:443
- Jobs
- build-test
- Rule
- egress
Evidence
Connection outside the process’s allowed destinationscause
connection to downloads.tangerina.io:443, opened by curl
subject downloads.tangerina.io:443
by curl --fail --location --silent --show-error --output /home/runner/work/deformable/deformable/target/release/build/deformable-2211ee0506fb46e7/out/library/libde…
What a build script's fetch becamesupport
nothing came down that the build kept
Connection opened by a build script or child processsupport
the opener descends from the build script at /home/runner/work/deformable/deformable/target/release/build/deformable-614998bfb66bac5d/build_script_build-614998bfb66bac5d
Tool commandsupport
Command: curl --fail --location --silent --show-error --output /home/runner/work/deformable/deformable/target/release/build/deformable-2211ee0506fb46e7/out/library/libde…
by curl --fail --location --silent --show-error --output /home/runner/work/deformable/deformable/target/release/build/deformable-2211ee0506fb46e7/out/library/libde…
Processes
build-test
cargo›cargo›build-script-build›curl
- Ran
- curl --fail --location --silent --show-error --output /home/runner/work/deformable/deformable/target/release/build/deformable-2211ee0506fb46e7/out/library/libde…
- Invoked by
- cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 4 processes
- cargocargo build --release --locked --message-format=json-render-diagnostics2480
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2515
- build-script-build/home/runner/work/deformable/deformable/target/release/build/deformable-614998bfb66bac5d/build-script-build2516
- curlcurl --fail --location --silent --show-error --output /home/runner/work/deformable/deformable/target/release/build/deformable-2211ee0506fb46e7/out/library/libde…2518
Remediation
The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.
