Skip to content
Open-Source Registry

cargo / execsurface-observe / 1.0.0

execsurface-observe 1.0.0

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 8 detections
processes
468
operations
9.1K
packages
18
compiler runs
14
connections
1
job time
12s
capture
108 KB
records
15K
bytes / record
7.0

Build behaviourcompiled and nothing more

run 436aee15-9102-4a67-be77-9d81788b1ba7 · built 2026-10-08 · complete

Artifact

file · retained · product · graph v1
2

Checks

13 of 14 clear Cross-process access
Build behavior✓✓▲✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

8
  • Process read another process's memory or registers
    execsurface_observe-c4b09a9f245184cc
    medium
  • Process read another process's memory or registers
    m11_shared_fd_ambiguity-91608029ddf619b3
    medium
  • Process read another process's memory or registers
    m12_adversarial-10d3ee7167848fb7
    medium
  • Process read another process's memory or registers
    merge_authorization_hardlink-a0b79a07ff8e93ac
    medium
  • Process read another process's memory or registers
    ptrace_linux-888418b1307dc2aa
    medium
  • Process read another process's memory or registers
    r2_fd_state_machine-059ca1631f767bcf
    medium
  • Process read another process's memory or registers
    r3_object_identity-acc2a81a19c2ac46
    medium
  • Process read another process's memory or registers
    stage2_external_falsification-0a6bba3cf54d013d
    medium

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
execsurface_observe-c4b09a9f245184cc
Jobs
build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×1

    target sh

    by /home/runner/work/execsurface/execsurface/target/release/deps/execsurface_observe-c4b09a9f245184cc

  2. Process relationshipmitigation

    The target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: execsurface_observe-c4b09a9f245184cc (pid 3032) — /home/runner/work/execsurface/execsurface/target/release/deps/execsurface_observe-c4b09a9f245184cc

    subject execsurface_observe-c4b09a9f245184cc

  4. Process detailscontext

    target: dash (pid 3033) — /bin/sh -c printf bridge > /tmp/execsurface-p8-a3-report-live-target-2998-0

    target sh

Processes

build-test

cargo›cargo›execsurface_observe-c4b09a9f245184cc

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/execsurface_observe-c4b09a9f245184cc
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. execsurface_observe-c4b09a9f245184cc/home/runner/work/execsurface/execsurface/target/release/deps/execsurface_observe-c4b09a9f245184cc3032

build-test

cargo›cargo›execsurface_observe-c4b09a9f245184cc

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/execsurface_observe-c4b09a9f245184cc
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. execsurface_observe-c4b09a9f245184cc/home/runner/work/execsurface/execsurface/target/release/deps/execsurface_observe-c4b09a9f245184cc3032

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
m11_shared_fd_ambiguity-91608029ddf619b3
Jobs
build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×1

    target execsurface-fixture

    by /home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3

  2. Process relationshipmitigation

    The target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: m11_shared_fd_ambiguity-91608029ddf619b3 (pid 3049) — /home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3

    subject m11_shared_fd_ambiguity-91608029ddf619b3

  4. Process detailscontext

    target: execsurface_fixture-ca06ab72995cbbb7 (pid 3047) — /home/runner/work/execsurface/execsurface/target/release/execsurface-fixture thread-exec-fd /tmp/execsurface-s5-thread-exec-3035-fixture.txt

    target execsurface-fixture

Processes

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

build-test

cargo›cargo›m11_shared_fd_ambiguity-91608029ddf619b3

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b3
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m11_shared_fd_ambiguity-91608029ddf619b3/home/runner/work/execsurface/execsurface/target/release/deps/m11_shared_fd_ambiguity-91608029ddf619b33049

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
m12_adversarial-10d3ee7167848fb7
Jobs
build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×1

    target sh

    by /home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7

  2. Process relationshipmitigation

    The target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: m12_adversarial-10d3ee7167848fb7 (pid 3063) — /home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7

    subject m12_adversarial-10d3ee7167848fb7

  4. Process detailscontext

    target: dash (pid 3068) — /bin/sh -c cat -- "$1" >/dev/null 2>&1 || true m12-sh /tmp/execsurface-m12-failed-open-3060/definitely-missing-input

    target sh

Processes

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

build-test

cargo›cargo›m12_adversarial-10d3ee7167848fb7

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb7
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. m12_adversarial-10d3ee7167848fb7/home/runner/work/execsurface/execsurface/target/release/deps/m12_adversarial-10d3ee7167848fb73063

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
merge_authorization_hardlink-a0b79a07ff8e93ac
Jobs
build-test, build-test, build-test, build-test, build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×5

    target ln

    by /home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac

  2. Process relationshipmitigation

    The target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: merge_authorization_hardlink-a0b79a07ff8e93ac (pid 3073) — /home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac

    subject merge_authorization_hardlink-a0b79a07ff8e93ac

  4. Process detailscontext

    target: cat (pid 3076) — ln /tmp/execsurface-hardlink-boundary-success-3072-1/source.bin /tmp/execsurface-hardlink-boundary-success-3072-1/alias.bin

    target ln

Processes

build-test

cargo›cargo›merge_authorization_hardlink-a0b79a07ff8e93ac

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. merge_authorization_hardlink-a0b79a07ff8e93ac/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac3073

build-test

cargo›cargo›merge_authorization_hardlink-a0b79a07ff8e93ac

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. merge_authorization_hardlink-a0b79a07ff8e93ac/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac3073

build-test

cargo›cargo›merge_authorization_hardlink-a0b79a07ff8e93ac

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. merge_authorization_hardlink-a0b79a07ff8e93ac/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac3073

build-test

cargo›cargo›merge_authorization_hardlink-a0b79a07ff8e93ac

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. merge_authorization_hardlink-a0b79a07ff8e93ac/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac3073

build-test

cargo›cargo›merge_authorization_hardlink-a0b79a07ff8e93ac

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. merge_authorization_hardlink-a0b79a07ff8e93ac/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac3073

build-test

cargo›cargo›merge_authorization_hardlink-a0b79a07ff8e93ac

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. merge_authorization_hardlink-a0b79a07ff8e93ac/home/runner/work/execsurface/execsurface/target/release/deps/merge_authorization_hardlink-a0b79a07ff8e93ac3073

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
ptrace_linux-888418b1307dc2aa
Jobs
build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×1

    target execsurface-fixture

    by /home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa

  2. Process relationshipmitigation

    The target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: ptrace_linux-888418b1307dc2aa (pid 3100) — /home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa

    subject ptrace_linux-888418b1307dc2aa

  4. Process detailscontext

    target: execsurface_fixture-ca06ab72995cbbb7 (pid 3089) — /home/runner/work/execsurface/execsurface/target/release/execsurface-fixture openat2 /tmp/execsurface-m65-openat2-3079

    target execsurface-fixture

Processes

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

build-test

cargo›cargo›ptrace_linux-888418b1307dc2aa

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. ptrace_linux-888418b1307dc2aa/home/runner/work/execsurface/execsurface/target/release/deps/ptrace_linux-888418b1307dc2aa3100

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
r2_fd_state_machine-059ca1631f767bcf
Jobs
build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×1

    target execsurface-fixture

    by /home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf

  2. Process relationshipmitigation

    The target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: r2_fd_state_machine-059ca1631f767bcf (pid 3117) — /home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf

    subject r2_fd_state_machine-059ca1631f767bcf

  4. Process detailscontext

    target: execsurface_fixture-ca06ab72995cbbb7 (pid 3122) — /home/runner/work/execsurface/execsurface/target/release/execsurface-fixture stage2-fcntl-dupfd-untracked-write

    target execsurface-fixture

Processes

build-test

cargo›cargo›r2_fd_state_machine-059ca1631f767bcf

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r2_fd_state_machine-059ca1631f767bcf/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf3117

build-test

cargo›cargo›r2_fd_state_machine-059ca1631f767bcf

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r2_fd_state_machine-059ca1631f767bcf/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf3117

build-test

cargo›cargo›r2_fd_state_machine-059ca1631f767bcf

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r2_fd_state_machine-059ca1631f767bcf/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf3117

build-test

cargo›cargo›r2_fd_state_machine-059ca1631f767bcf

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r2_fd_state_machine-059ca1631f767bcf/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf3117

build-test

cargo›cargo›r2_fd_state_machine-059ca1631f767bcf

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r2_fd_state_machine-059ca1631f767bcf/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf3117

build-test

cargo›cargo›r2_fd_state_machine-059ca1631f767bcf

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r2_fd_state_machine-059ca1631f767bcf/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf3117

build-test

cargo›cargo›r2_fd_state_machine-059ca1631f767bcf

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r2_fd_state_machine-059ca1631f767bcf/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf3117

build-test

cargo›cargo›r2_fd_state_machine-059ca1631f767bcf

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r2_fd_state_machine-059ca1631f767bcf/home/runner/work/execsurface/execsurface/target/release/deps/r2_fd_state_machine-059ca1631f767bcf3117

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
r3_object_identity-acc2a81a19c2ac46
Jobs
build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×1

    target execsurface-fixture

    by /home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46

  2. Process relationshipmitigation

    The target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: r3_object_identity-acc2a81a19c2ac46 (pid 3124) — /home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46

    subject r3_object_identity-acc2a81a19c2ac46

  4. Process detailscontext

    target: execsurface_fixture-ca06ab72995cbbb7 (pid 3136) — /home/runner/work/execsurface/execsurface/target/release/execsurface-fixture stage2-hardlink-after-open-write /tmp/execsurface-stage2-r3-link-after-open-3124/cr…

    target execsurface-fixture

Processes

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

build-test

cargo›cargo›r3_object_identity-acc2a81a19c2ac46

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac46
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. r3_object_identity-acc2a81a19c2ac46/home/runner/work/execsurface/execsurface/target/release/deps/r3_object_identity-acc2a81a19c2ac463124

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
stage2_external_falsification-0a6bba3cf54d013d
Jobs
build-test, build-test, build-test, build-test, build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×1

    target execsurface-fixture

    by /home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d

  2. Process relationshipmitigation

    The target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: stage2_external_falsification-0a6bba3cf54d013d (pid 3139) — /home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d

    subject stage2_external_falsification-0a6bba3cf54d013d

  4. Process detailscontext

    target: execsurface_fixture-ca06ab72995cbbb7 (pid 3143) — /home/runner/work/execsurface/execsurface/target/release/execsurface-fixture stage2-dup2-untracked-write /tmp/execsurface-stage2-r1-stale-fd-3139-victim.txt

    target execsurface-fixture

Processes

build-test

cargo›cargo›stage2_external_falsification-0a6bba3cf54d013d

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. stage2_external_falsification-0a6bba3cf54d013d/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d3139

build-test

cargo›cargo›stage2_external_falsification-0a6bba3cf54d013d

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. stage2_external_falsification-0a6bba3cf54d013d/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d3139

build-test

cargo›cargo›stage2_external_falsification-0a6bba3cf54d013d

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. stage2_external_falsification-0a6bba3cf54d013d/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d3139

build-test

cargo›cargo›stage2_external_falsification-0a6bba3cf54d013d

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. stage2_external_falsification-0a6bba3cf54d013d/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d3139

build-test

cargo›cargo›stage2_external_falsification-0a6bba3cf54d013d

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. stage2_external_falsification-0a6bba3cf54d013d/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d3139

build-test

cargo›cargo›stage2_external_falsification-0a6bba3cf54d013d

Ran
/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2723
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2723
  3. stage2_external_falsification-0a6bba3cf54d013d/home/runner/work/execsurface/execsurface/target/release/deps/stage2_external_falsification-0a6bba3cf54d013d3139

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (execsurface) via crates.io · 990 files · went into an output ecosystem
Dependencies18Build behaviour
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
execsurface-model1.0.0
serde1.0.229build script
serde_core1.0.229build script
itoa1.0.18
memchr2.8.3
proc-macro21.0.107build script
quote1.0.47build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
syn3.0.6
unicode-ident1.0.26
zmij1.0.23build script

Raw data

capture
108 KB
records
15,453
bytes per record
7.0

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-08 · run 436aee15-9102-4a67-be77-9d81788b1ba7

analysis 0.1.0 · 2026-10-08 · 7d82935 · graph v1