Skip to content
Open-Source Registry

cargo / fux / 0.29.0

fux 0.29.0

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
937
operations
24K
packages
16
compiler runs
19
connections
1
job time
5m 33s
capture
595 KB
records
47K
bytes / record
12.8

Build behaviourcompiled and nothing more

run 2f5f77db-193e-42f9-a725-cb09e282047f · built 2026-10-18 · complete View on crates.io

Graph

process-access · medium
3

Checks

13 of 14 clear Cross-process access
Build behavior✓✓▲✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Process read another process's memory or registers
    fux
    medium

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
fux
Jobs
build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×16, across 16 processes

    target bash

    by /home/runner/work/fux/fux/target/release/fux __serve /home/runner/.cache/fux/fux-t8646-3/s/fux.sock

  2. Process relationshipmitigation

    Every target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: fux (pid 8661) — /home/runner/work/fux/fux/target/release/fux __serve /home/runner/.cache/fux/fux-t8646-3/s/fux.sock, and 10 more processes of the same program

    subject fux

  4. Process detailscontext

    target: bash (pid 8668) — bash --norc -i

    target bash

  5. Process detailscontext

    target: python3.14 (pid 8666) — python3 -c import os, select, sys, tty tty.setraw(0); os.write(1, b'\x1b[?1049h'); n = 0; got = b'-' while got != b'q': n += 1 os.write(1, b'\x1b[H\x1b[…

    target python3

  6. Process detailscontext

    target: python3.14 (pid 8671) — python3 -i

    target python3

  7. Process detailscontext

    target: bash (pid 8696) — bash --norc -i

    target bash

  8. Process detailscontext

    target: bash (pid 8699) — bash --norc -i

    target bash

  9. Additional itemscontext

    … +11 more target processes

What came before it

Loading the graph

Processes

build-test

cargo›cargo›ready-e0863c0846c41d56›fux

Ran
/home/runner/work/fux/fux/target/release/fux __serve /home/runner/.cache/fux/fux-t8646-3/s/fux.sock
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 4 processes
  1. cargocargo test --release --locked --no-fail-fast2651
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2651
  3. ready-e0863c0846c41d56/home/runner/work/fux/fux/target/release/deps/ready-e0863c0846c41d568646
  4. fux/home/runner/work/fux/fux/target/release/fux __serve /home/runner/.cache/fux/fux-t8646-3/s/fux.sock8661

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (fux) via crates.io · 1,046 files · went into an output ecosystem
Dependencies16Build behaviour
errno0.3.14
fux-vt0.10.0
fuxix0.6.0
fuxth0.3.0
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
signal-hook0.4.5build script
signal-hook-registry1.4.8
unicode-width0.2.2
seccompiler0.5.0
windows-link0.2.1
windows-sys0.61.2
Versions26RiskVulnsPublished
0.28.14h ago
0.28.06h ago
0.27.17h ago
0.27.011h ago
0.26.012h ago
0.25.017h ago
0.24.01d ago
0.22.07d ago
0.21.0not analyzed7d ago
0.20.011d ago
0.19.012d ago
0.18.1not analyzed12d ago
0.18.0not analyzed13d ago
0.17.0not analyzed2026-09-28
0.16.0not analyzed2026-09-27
0.15.0not analyzed2026-09-27
0.14.0not analyzed2026-09-27
0.13.0not analyzed2026-09-26
0.12.0not analyzed2026-09-23
0.11.0not analyzed2026-09-14
0.10.0not analyzed2026-09-11
0.8.0not analyzed2026-09-11
0.7.0not analyzed2026-09-10
0.2.0not analyzed2026-09-04
0.1.0not analyzed2026-08-18
0.29.0mediumnone

Raw data

capture
595 KB
records1 window cut short
46,661
bytes per record
12.8

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-18 · run 2f5f77db-193e-42f9-a725-cb09e282047f

analysis 0.1.0 · 2026-10-17 · 0abbde9 · graph v2