Skip to content
Open-Source Registry

cargo / eckit / 2.5.0

eckit 2.5.0

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 2 of 1 jobs captured 1 detection
processes
1,453
operations
432K
packages
49
compiler runs
854
connections
4
job time
6m 53s
capture
1.3 MB
records
535K
bytes / record
2.4

Build behaviourhas a build scriptundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 0deeb964-dbb4-4460-b705-920d5efd0d89 · built 2026-10-14 · complete

Artifact

file · retained · product · graph v2
1

Checks

13 of 14 clear Network activity
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Build script fetched what the build compiled, linked or ran
    eckit-sys 2.5.0 › github.com:443
    high

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
eckit-sys 2.5.0
Destination
github.com:443
Reaches
libeckit.rlibbuild
Jobs
build-test, build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by git-remote-http

    subject github.com:443

    by /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

  2. What a build script's fetch becamesupport

    578 files came down; the build compiled or linked dso1.c, dso2.c, main.c and ran ecbuild

  3. Connection opened by a build script or child processsupport

    the opener descends from the build script at /home/runner/work/eckit/eckit/target/release/build/eckit-sys-6773e4e0c65fb2f4/build_script_build-6773e4e0c65fb2f4

  4. Tool commandsupport

    Command: /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

    by /usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git

Processes

build-test

cargo›cargo›build-script-build›git›git›git-remote-https

Ran
/usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 6 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2523
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2523
  3. build-script-build/home/runner/work/eckit/eckit/target/release/build/eckit-sys-6773e4e0c65fb2f4/build-script-build3291
  4. gitgit clone --depth 1 --branch 3.13.1 https://github.com/ecmwf/ecbuild.git /home/runner/work/eckit/eckit/target/release/build/eckit-sys-10a809788aa78b19/out/src/e…3304
  5. git/usr/lib/git-core/git remote-https origin https://github.com/ecmwf/ecbuild.git3293
  6. git-remote-https/usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git3299

build-test

cargo›cargo›build-script-build›git›git›git-remote-https

Ran
/usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 6 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2450
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2450
  3. build-script-build/home/runner/work/eckit/eckit/target/release/build/eckit-sys-6773e4e0c65fb2f4/build-script-build3179
  4. gitgit clone --depth 1 --branch 3.13.1 https://github.com/ecmwf/ecbuild.git /home/runner/work/eckit/eckit/target/release/build/eckit-sys-10a809788aa78b19/out/src/e…3216
  5. git/usr/lib/git-core/git remote-https origin https://github.com/ecmwf/ecbuild.git3183
  6. git-remote-https/usr/lib/git-core/git-remote-https origin https://github.com/ecmwf/ecbuild.git3190

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

2 peers
  • github.com:443 build code of eckit-sys · git-remote-http · GitHub, Inc. · 1,156 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (eckit) via crates.io · 5,220 files · went into an output ecosystem
Dependencies50Build behaviour
aho-corasick1.1.5
bindman0.2.0proc macro
bindman-build0.2.0
bindman-utils0.2.0
cc1.8.0
codespan-reporting0.13.1
cxx1.0.205build script
cxx-build1.0.205
cxxbridge-flags1.0.205
cxxbridge-macro1.0.205proc macro
eckit-sys2.5.0build scriptnetworkruns toolsgithub.com, git
equivalent1.0.2
find-msvc-tools0.1.14
foldhash0.2.0
hashbrown0.17.1
heck0.5.0
indexmap2.14.2
itoa1.0.18
ld-linux-x86-64.so.2system library
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
link-cplusplus1.0.12build script
log0.4.34
memchr2.8.3
proc-macro21.0.107build script
quote1.0.47build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
scratch1.0.9build script
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
shlex2.0.1
syn2.0.119
syn3.0.9
termcolor1.4.1
tree-sitter0.23.2build script
tree-sitter-cpp0.23.4build script
tree-sitter-language0.1.9build script
tree-sitter-rust0.23.3build script
unicode-ident1.0.27
unicode-width0.2.2
winapi-util0.1.11
windows-link0.2.1
windows-sys0.61.2
zmij1.0.23build script

Raw data

capture
1.3 MB
records
534,813
bytes per record
2.4

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

2 of 2 jobs captured: build-test success, build-test success · Generated 2026-10-14 · run 0deeb964-dbb4-4460-b705-920d5efd0d89

analysis 0.1.0 · 2026-10-14 · afb437c · graph v2