Skip to content
Open-Source Registry

cargo / execsurface

execsurface 1.0.0

processes
719
operations
14K
packages
33
compiler runs
30
connections
1
job time
29s
capture
146 KB
records
23K
bytes / record
6.3

Runtime execution-surface drift detection for Linux CI and developer workflows

1 detection

Build behaviourcompiled and nothing more

190 downloads · source · cargo

ci devsecops observability runtime-security supply-chain

Release 1.0.0 run d116a910-0d4d-43f4-bef2-b54d16765917 · built 2026-10-08

Artifact

binary · retained · product
1
ChecksDetections
Build behavior
✓ Network activity—
✓ Sensitive data access and transfer—
▲ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
✓ Known vulnerabilities—
✓ Build-time dependency advisories—
✓ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

1
  • Process read another process's memory or registers
    execsurface-a4a69f357d490f92
    via process_vm/proc-mem — read ×5
    medium

Detection

medium

Process read another process's memory or registers

subject execsurface-a4a69f357d490f92

via process_vm/proc-mem — read ×5

actor: execsurface-a4a69f357d490f92 (pid 3422) — /home/runner/work/execsurface/execsurface/target/release/execsurface check --diff-only --json --baseline /tmp/execsurface-m4-drift-3407-2/lock.json -- /bin/sh -…

target: cat (pid 3427) — /bin/echo x

  1. rustup3023
  2. cargo3023
  3. check_linux-1aef5b4eaded4bb23411
  4. execsurface-a4a69f357d490f923422at 00:01:08

witnessed · rule process-access

Network

0 peers
    cargo fetched 1,239 files from static.crates.io

    Raw data

    capture
    146 KB
    records
    23,180
    bytes per record
    6.3

    Loading a sample of the capture

    Want to see more? E-mail us at hello@bitbison.io about your use case.

    Dependencies

    33 packages, 8 with a build script that ran, 0 doing more than compiling
    PackageVersionUsageBuild behaviour
    generic-array0.14.7linkedbuild script
    ld-linux-x86-64.so.2linkedsystem library
    libc direct0.2.190linkedbuild script
    libc.so.6linkedsystem library
    libgcc_s.so.1linkedsystem library
    libm.so.6linkedsystem library
    libmvec.so.1linkedsystem library
    proc-macro21.0.107observedbuild script
    quote1.0.47observedbuild script
    serde1.0.229linkedbuild script
    serde_core1.0.229linkedbuild script
    serde_derive1.0.229observedproc macro
    serde_json direct1.0.151linkedbuild script
    zmij1.0.23linkedbuild script
    block-buffer0.10.4linked
    cfg-if1.0.5linked
    cpufeatures0.2.17linked
    crypto-common0.1.7linked
    digest0.10.7linked
    execsurface-baseline direct1.0.0linked
    execsurface-diff direct1.0.0linked
    execsurface-model direct1.0.0linked
    execsurface-normalize direct1.0.0linked
    execsurface-observe direct1.0.0linked
    execsurface-policy direct1.0.0linked
    execsurface-report direct1.0.0linked
    itoa1.0.18linked
    memchr2.8.3linked
    sha2 direct0.10.9linked
    syn3.0.6observed
    typenum1.20.1linked
    unicode-ident1.0.26observed
    version_check0.9.5observed

    1 of 1 jobs captured: build-test success · Generated 2026-10-09 · tarp 0.1.0+20261008175400-gc0b8b6ba8883 · run d116a910-0d4d-43f4-bef2-b54d16765917