Skip to content
Open-Source Registry

cargo / landstrip

landstrip 0.19.12

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection2 vulnerabilities
processes
600
operations
18K
packages
79
compiler runs
125
connections
1
job time
5m 34s
capture
246 KB
records
32K
bytes / record
7.7

Sandbox for coding agents with parametrized state

Build behaviourcompiled and nothing more

3,870 downloads · source · home page · cargo

Artifact

binary · retained · product · graph v2
2
ChecksDetections
Build behavior
✓ Network activity—
✓ Sensitive data access and transfer—
▲ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
✓ Build-time dependency advisories—
✓ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

1
  • Process read another process's memory or registers
    landstrip-e2ab0a054593a280
    via process_vm/proc-mem — read ×95, across 81 processes
    medium

Detection

medium

Process read another process's memory or registers

subject landstrip-e2ab0a054593a280

via process_vm/proc-mem — read ×95, across 81 processes

actor: landstrip-e2ab0a054593a280 (pid 3751) — /home/runner/work/landstrip/landstrip/target/release/landstrip run -p /tmp/ls-data-3714/unrestricted-read-policy-runs-tool/policy-0.json -- /bin/sh -c printf ok, and 63 more processes of the same program

target: dash (pid 3752) — /bin/sh -c printf ok

  1. rustup3641
  2. cargo3641
  3. data-16ec57d91e2925ab3714
  4. landstrip-e2ab0a054593a2803751at 01:27:27

witnessed · rule process-access

Network

0 peers
    cargo fetched 4,040 files from static.crates.io
    Vulnerable dependencies2PackageVersionFixSeverityTitleReach
    RUSTSEC-2026-0333noyalib0.0.5>=0.0.53highResource budgets not enforced on the typed deserialization pathretained
    GHSA-hhw4-xg65-fp2xserde_yml0.0.13none publishedmediumserde_yml crate is unsound and unmaintainedretained

    Raw data

    capture
    246 KB
    records
    32,138
    bytes per record
    7.7

    Loading a sample of the capture

    Want to see more? E-mail us at hello@bitbison.io about your use case.

    Dependencies

    81 packages, 12 with a build script that ran, 0 doing more than compiling
    PackageVersionUsageBuild behaviour
    anyhow direct1.0.104linkedbuild script
    clap_derive4.6.7linkedproc macro
    defmt1.1.1feature_gatedbuild script, not run
    defmt-macros1.1.1buildtime_onlybuild script, not runproc macro
    enumflags2_derive0.7.12linkedproc macro
    jiff-static0.2.34buildtime_onlyproc macro
    ld-linux-x86-64.so.2linkedsystem library
    libc direct0.2.189linkedbuild script
    libc.so.6linkedsystem library
    libgcc_s.so.1linkedsystem library
    libm.so.6linkedsystem library
    libmvec.so.1linkedsystem library
    memoffset0.9.1linkedbuild script
    nix direct0.31.3linkedbuild script
    noyalib0.0.5linkedbuild script
    portable-atomic1.14.0platform_gatedbuild script, not run
    portable-atomic-util0.2.7platform_gatedbuild script, not run
    proc-macro21.0.107linkedbuild script
    quote1.0.47linkedbuild script
    serde direct1.0.229linkedbuild script
    serde_core1.0.229linkedbuild script
    serde_derive1.0.229linkedproc macro
    serde_json direct1.0.151linkedbuild script
    strum_macros0.28.0linkedproc macro
    thiserror2.0.19linkedbuild script
    thiserror-impl2.0.19linkedproc macro
    zmij1.0.23linkedbuild script
    aho-corasick1.1.4linked
    anstream1.0.0linked
    anstyle1.0.14linked
    anstyle-parse1.0.0linked
    anstyle-query1.1.5linked
    anstyle-wincon3.0.11platform_gated
    autocfg1.5.1buildtime_only
    bitflags1.3.2feature_gated
    bitflags2.13.1linked
    cfg-if1.0.4linked
    cfg_aliases0.2.2buildtime_only
    clap direct4.6.7linked
    clap_builder4.6.7linked
    clap_lex1.1.0linked
    colorchoice1.0.5linked
    defmt-parser1.0.0buildtime_only
    dirs direct7.0.0linked
    dirs-sys0.5.0linked
    enumflags20.7.12linked
    env_filter2.0.0linked
    env_logger direct0.11.11linked
    equivalent1.0.2linked
    getrandom0.2.17platform_gated
    hashbrown0.17.1linked
    heck0.5.0linked
    indexmap2.14.0linked
    is_terminal_polyfill1.70.2linked
    itoa1.0.18linked
    jiff0.2.34linked
    jiff-core0.1.0linked
    landlock direct0.4.7linked
    libredox0.1.18platform_gated
    log direct0.4.34linked
    memchr2.8.3linked
    once_cell_polyfill1.70.2platform_gated
    option-ext0.2.0linked
    redox_users0.5.2platform_gated
    regex1.13.1linked
    regex-automata0.4.16linked
    regex-syntax0.8.11linked
    rustc-hash2.1.3linked
    seccompiler direct0.5.0linked
    serde_yml direct0.0.13linked
    smallvec1.15.2linked
    strsim0.11.1linked
    strum direct0.28.0linked
    syn2.0.119linked
    syn3.0.3linked
    unicode-ident1.0.24linked
    utf8parse0.2.2linked
    wasi0.11.1+wasi-snapshot-preview1platform_gated
    windows-link0.2.1platform_gated
    windows-sys direct0.61.2platform_gated
    zeroize direct1.9.0dead

    1 of 1 jobs captured: build-test success · Generated 2026-10-11 · run d036e933-f730-418b-8f72-aff0a3a6910b

    analysis 0.1.0 · 2026-10-10 · ce2b8d5 · graph v2