Build script reached github.com
Unexpected network connection
- Subject
- ironbark-mlx-sys 0.1.0
- Destination
- github.com:443
- Jobs
- build-test
- Rule
- egress
Evidence
Connection outside the process’s allowed destinationscause
connection to github.com:443, opened by git-remote-http
subject github.com:443
by /usr/lib/git-core/git-remote-https origin https://github.com/ml-explore/mlx.git
What a build script's fetch becamesupport
10 files came down; nothing the build compiled, linked or ran
Connection opened by a build script or child processsupport
the opener descends from the build script at /home/runner/work/ironbark/ironbark/target/release/build/ironbark-mlx-sys-8837df0f5d23ba3b/build_script_build-8837df0f5d23ba3b
Tool commandsupport
Command: /usr/lib/git-core/git-remote-https origin https://github.com/ml-explore/mlx.git
by /usr/lib/git-core/git-remote-https origin https://github.com/ml-explore/mlx.git
Processes
build-test
cargo›cargo›build-script-build›…›git›git-remote-https
- Ran
- /usr/lib/git-core/git-remote-https origin https://github.com/ml-explore/mlx.git
- Invoked by
- cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 13 processes
- cargocargo build --release --locked --message-format=json-render-diagnostics2465
- cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2465
- build-script-build/home/runner/work/ironbark/ironbark/target/release/build/ironbark-mlx-sys-8837df0f5d23ba3b/build-script-build2920
- cmakecmake -Wdev --debug-output /home/runner/work/ironbark/ironbark/src/mlx-c -B /home/runner/work/ironbark/ironbark/target/release/build/ironbark-mlx-sys-f2e47982ef…2928
- cmake/usr/bin/cmake --build . --config Debug2984
- gmake/usr/bin/gmake -f Makefile2985
- gmake/usr/bin/gmake -s -f CMakeFiles/Makefile2 all2988
- gmake/usr/bin/gmake -s -f CMakeFiles/mlx-populate.dir/build.make CMakeFiles/mlx-populate.dir/build2992
- sh/bin/sh -c cd /home/runner/work/ironbark/ironbark/target/release/build/ironbark-mlx-sys-f2e47982ef5204b6/out/build/_deps && /usr/bin/cmake -DCMAKE_MESSAGE_LOG_L…2999
- cmake/usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/ironbark/ironbark/target/release/build/ironbark-mlx-sys-f2e47982ef5204b6/out/build/_deps/m…3000
- git/usr/bin/git clone --no-checkout --config advice.detachedHead=false https://github.com/ml-explore/mlx.git mlx-src3002
- git/usr/lib/git-core/git remote-https origin https://github.com/ml-explore/mlx.git3003
- git-remote-https/usr/lib/git-core/git-remote-https origin https://github.com/ml-explore/mlx.git3005
Remediation
The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.
