Skip to content
Open-Source Registry

cargo / irongraph-sdk / 0.1.7

irongraph-sdk 0.1.7

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured 3 detections
processes
575
operations
79K
packages
173
compiler runs
1,239
connections
3
job time
1m 27s
capture
582 KB
records
118K
bytes / record
4.9

Build behaviourits build script reached github.com, release-assets.githubusercontent.comundeclared fetchfetch went into the outputlinked a downloaded binaryfetched outside crates.iocompiled C/C++

run b075049b-5363-478a-a2ac-92f190e61950 · built 2026-10-09 · complete

Artifact

file · retained · product · graph v1
1

Checks

11 of 14 clear Network activity Data flow analysis +1 more
Build behavior▲✓✓✓✓▲✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

3
  • Build code opened a network connection
    irongraph-sdk 0.1.7 › github.com:443, release-assets.githubusercontent.com:443
    high
  • Uncompiled library linked
    libirongraph_ffi.a › github.com, release-assets.githubusercontent.com
    high
  • Uncompiled library linked
    libirongraph_ffi.a › github.com, release-assets.githubusercontent.com
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
irongraph-sdk 0.1.7
Destination
github.com:443, release-assets.githubusercontent.com:443
Jobs
build-test, build-test
Rule
egress · IronGraph

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build_script_build-931c6e2d19990480

    subject github.com:443

    by /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build_script_build-931c6e2d19990480

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build-script-build

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build_script_build-931c6e2d19990480

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build-script-build
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast5096
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast5096
  3. build-script-build/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build-script-build5568

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-ff058809bc67ac99/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2457
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2457
  3. build-script-build/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-ff058809bc67ac99/build-script-build5055

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Detection

highwitnessed

Uncompiled library linked

Object file origin needs review

Subject
/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-977ae03b10c50a63/out/irongraph-native/libirongraph_ffi.awritten by build_script_build-ff058809bc67ac99
Destination
github.com, release-assets.githubusercontent.com
Reaches
Jobs
build-test
Rule
object-provenance · IronGraph

Evidence

  1. Object written under a build script that downloadedcause

    written under the build script at /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-ff058809bc67ac99/build_script_build-ff058809bc67ac99, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-977ae03b10c50a63/out/irongraph-native/libirongraph_ffi.a

  2. Written without a recorded source compilationcause

    Written by build_script_build-ff058809bc67ac99 without a recorded source compilation

    subject /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-977ae03b10c50a63/out/irongraph-native/libirongraph_ffi.a

    by /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-ff058809bc67ac99/build-script-build

  3. Asked for by the build's own declarationsupport

    irongraph-sdk asked the linker for it: static irongraph_ffi (target/release/build/irongraph-sdk-977ae03b10c50a63/output)

    subject /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-977ae03b10c50a63/out/irongraph-native/libirongraph_ffi.a

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-ff058809bc67ac99/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2457
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2457
  3. build-script-build/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-ff058809bc67ac99/build-script-build5055

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Detection

highwitnessed

Uncompiled library linked

Object file origin needs review

Subject
/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-b91b7294b64c2a05/out/irongraph-native/libirongraph_ffi.awritten by build_script_build-931c6e2d19990480
Destination
github.com, release-assets.githubusercontent.com
Reaches
Jobs
build-test
Rule
object-provenance · IronGraph

Evidence

  1. Object written under a build script that downloadedcause

    written under the build script at /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build_script_build-931c6e2d19990480, which downloaded from github.com, release-assets.githubusercontent.com

    subject /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-b91b7294b64c2a05/out/irongraph-native/libirongraph_ffi.a

  2. Written without a recorded source compilationcause

    Written by build_script_build-931c6e2d19990480 without a recorded source compilation

    subject /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-b91b7294b64c2a05/out/irongraph-native/libirongraph_ffi.a

    by /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build-script-build

  3. Asked for by the build's own declarationsupport

    irongraph-sdk asked the linker for it: static irongraph_ffi (target/release/build/irongraph-sdk-b91b7294b64c2a05/output)

    subject /home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-b91b7294b64c2a05/out/irongraph-native/libirongraph_ffi.a

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build-script-build
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast5096
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast5096
  3. build-script-build/home/runner/work/IronGraph/IronGraph/target/release/build/irongraph-sdk-931c6e2d19990480/build-script-build5568

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

3 peers
  • github.com:443 irongraph-sdk's own build code · build_script_build-931c6e2d19990480 (IronGraph); build_script_build-ff058809bc67ac99 (IronGraph) · GitHub, Inc. · 2 files · went into an output undeclared
  • release-assets.githubusercontent.com:443 irongraph-sdk's own build code · build_script_build-931c6e2d19990480 (IronGraph); build_script_build-ff058809bc67ac99 (IronGraph) · Fastly, Inc. · 2 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (IronGraph) via crates.io · 11,741 files · went into an output ecosystem
Dependencies177Build behaviour
aws-lc-sys0.45.0build scriptprebuilt objects
ring0.17.14build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
aws-lc-rs1.18.1build script
displaydoc0.2.7proc macro
generic-array0.14.7build script
getrandom0.4.3build script
httparse1.10.1build script
icu_normalizer_data2.3.0build script
icu_properties_data2.3.0build script
jni0.22.4build script, not run
jni-macros0.22.4build script, not runproc macro
jni-sys-macros0.4.1proc macro
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
proc-macro21.0.107build script
quinn0.11.11build script, not run
quinn-udp0.5.15build script, not run
quote1.0.47build script
rustix1.1.4build script
rustls0.23.43build script
rustversion1.0.23build script, not runproc macro
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
thiserror2.0.20build script, not run
thiserror-impl2.0.20proc macro
tokio-macros2.7.2proc macro
wasm-bindgen0.2.128build script, not run
wasm-bindgen-macro0.2.128proc macro
wasm-bindgen-shared0.2.128build script, not run
yoke-derive0.8.2proc macro
zerofrom-derive0.1.7proc macro
zerovec-derive0.11.6proc macro
zmij1.0.23build script
atomic-waker1.1.2
base640.22.1
bitflags2.13.1
block-buffer0.10.4
bumpalo3.20.3
bytes1.12.1
cc1.4.5
cfg-if1.0.4
cfg_aliases0.2.2
chacha200.10.2
cmake0.1.58
combine4.6.8
core-foundation0.10.1
core-foundation-sys0.8.7
cpufeatures0.2.17
cpufeatures0.3.1
crypto-common0.1.7
digest0.10.7
dunce1.0.5
errno0.3.14
fastrand2.5.0
find-msvc-tools0.1.12
form_urlencoded1.2.2
fs_extra1.3.0
futures-channel0.3.34
futures-core0.3.34
futures-io0.3.34
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
getrandom0.2.17
http1.5.0
http-body1.1.0
http-body-util0.1.5
hyper1.11.1
hyper-rustls0.27.9
hyper-util0.1.20
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_properties2.3.0
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
ipnet2.12.1
itoa1.0.18
jni-sys0.4.1
jobserver0.1.35
js-sys0.3.105
linux-raw-sys0.12.1
litemap0.8.3
log0.4.34
lru-slab0.1.2
memchr2.8.3
mio1.2.3
once_cell1.21.4
openssl-probe0.2.1
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
potential_utf0.1.6
quinn-proto0.11.17
r-efi6.0.0
rand0.10.2
rand_core0.10.1
rand_pcg0.10.2
reqwest0.13.4
rustc-hash2.1.3
rustc_version0.4.1
rustls-native-certs0.8.4
rustls-pki-types1.15.1
rustls-platform-verifier0.7.0
rustls-platform-verifier-android0.1.1
rustls-webpki0.103.15
same-file1.0.6
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
sha20.10.9
shlex2.0.1
simd_cesu81.2.0
simdutf80.1.5
slab0.4.12
smallvec1.16.0
socket20.6.5
stable_deref_trait1.2.1
subtle2.6.1
syn2.0.119
syn3.0.5
sync_wrapper1.0.2
synstructure0.13.2
tempfile3.27.0
tinystr0.8.4
tinyvec1.13.2
tinyvec_macros0.1.1
tokio1.53.1
tokio-rustls0.26.5
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-core0.1.36
try-lock0.2.5
typenum1.20.1
unicode-ident1.0.24
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
version_check0.9.5
walkdir2.5.0
want0.3.1
wasi0.11.1+wasi-snapshot-preview1
wasm-bindgen-futures0.4.78
wasm-bindgen-macro-support0.2.128
web-sys0.3.105
web-time1.1.0
webpki-root-certs1.0.9
winapi-util0.1.11
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
writeable0.6.4
yoke0.8.3
zerofrom0.1.8
zeroize1.9.0
zerotrie0.2.5
zerovec0.11.8

Raw data

capture
582 KB
records
118,104
bytes per record
4.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-09 · run b075049b-5363-478a-a2ac-92f190e61950

analysis 0.1.0 · 2026-10-08 · c0b8b6b · graph v1