Skip to content
Open-Source Registry

cargo / landstrip / 0.19.16

landstrip 0.19.16

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection2 vulnerabilities
processes
973
operations
303K
packages
90
compiler runs
125
connections
1
job time
2m 21s
capture
1.3 MB
records
418K
bytes / record
3.1

Build behaviourcompiled C/C++

run 48ae414e-5307-4a36-b2ea-2194fc937f97 · built 2026-10-15 · complete

Graph

process-access · medium
3

Checks

12 of 14 clear Cross-process access Known vulnerabilities
Build behavior✓✓▲✓✓✓✓✓
Supply chain▲✓✓✓✓
Pipeline✓

Detections

1
  • Process read another process's memory or registers
    landstrip-50353e3af537a6a0
    medium

Detection

mediumwitnessed

Process read another process's memory or registers

Cross-process access

Subject
landstrip-50353e3af537a6a0
Jobs
build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via process_vm/proc-mem — read ×241, across 193 processes

    target sh

    by /home/runner/work/landstrip/landstrip/target/release/landstrip run -p /tmp/ls-data-14479/unrestricted-read-policy-runs-tool/policy-0.json -- /bin/sh -c printf o…

  2. Process relationshipmitigation

    Every target is a child or ancestor of the accessing process.

  3. Process detailscontext

    actor: landstrip-50353e3af537a6a0 (pid 14516) — /home/runner/work/landstrip/landstrip/target/release/landstrip run -p /tmp/ls-data-14479/unrestricted-read-policy-runs-tool/policy-0.json -- /bin/sh -c printf o…, and 137 more processes of the same program

    subject landstrip

  4. Process detailscontext

    target: dash (pid 14517) — /bin/sh -c printf ok

    target sh

  5. Process detailscontext

    target: dash (pid 14519) — /bin/sh -c uname -s

    target sh

  6. Process detailscontext

    target: cat (pid 14520) — uname -s

    target uname

  7. Process detailscontext

    target: gnutrue (pid 14522) — /bin/true

    target true

  8. Process detailscontext

    target: dash (pid 14524) — /bin/sh -c : > "$1/ok.txt"; test -f "$1/ok.txt" _ /tmp/ls-data-14479/allowWrite-permits-configured-root/allowed

    target sh

  9. Additional itemscontext

    … +188 more target processes

What came before it

Loading the graph

Processes

build-test

cargo›cargo›data-dd8382fe818c6c77›landstrip

Ran
/home/runner/work/landstrip/landstrip/target/release/landstrip run -p /tmp/ls-data-14479/unrestricted-read-policy-runs-tool/policy-0.json -- /bin/sh -c printf o…
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 4 processes
  1. cargocargo test --release --locked --no-fail-fast14406
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast14406
  3. data-dd8382fe818c6c77/home/runner/work/landstrip/landstrip/target/release/deps/data-dd8382fe818c6c7714479
  4. landstrip/home/runner/work/landstrip/landstrip/target/release/landstrip run -p /tmp/ls-data-14479/unrestricted-read-policy-runs-tool/policy-0.json -- /bin/sh -c printf o…14516

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (landstrip) via crates.io · 7,637 files · went into an output ecosystem
Dependencies92Build behaviour
aho-corasick1.1.4
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.104build script
bitflags2.13.1
cfg-if1.0.4
clap4.6.7
clap_builder4.6.7
clap_lex1.1.0
colorchoice1.0.5
dirs7.0.0
dirs-sys0.5.0
enumflags20.7.12
env_filter2.0.0
env_logger0.11.11
equivalent1.0.2
hashbrown0.17.1
indexmap2.14.0
is_terminal_polyfill1.70.2
itoa1.0.18
jiff0.2.34
jiff-core0.1.0
landlock0.4.7
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
log0.4.34
memchr2.8.3
memoffset0.9.1build script
nix0.31.3build script
noyalib0.0.5build script
option-ext0.2.0
regex1.13.1
regex-automata0.4.16
regex-syntax0.8.11
rustc-hash2.1.3
seccompiler0.5.0
serde1.0.229build script
serde_core1.0.229build script
serde_json1.0.151build script
serde_yml0.0.13
smallvec1.15.2
strsim0.11.1
strum0.28.0
thiserror2.0.19build script
utf8parse0.2.2
zmij1.0.23build script
foreign-types0.3.2
foreign-types-shared0.1.1
openssl0.10.81build script
openssl-sys0.9.117build script
zeroize1.9.0
anstyle-wincon3.0.11
autocfg1.5.1
bitflags1.3.2
cc1.8.0
cfg_aliases0.2.2
clap_derive4.6.7proc macro
defmt1.1.1build script, not run
defmt-macros1.1.1build script, not runproc macro
defmt-parser1.0.0
enumflags2_derive0.7.12proc macro
find-msvc-tools0.1.14
getrandom0.2.17
heck0.5.0
jiff-static0.2.34proc macro
libredox0.1.18
once_cell_polyfill1.70.2
openssl-macros0.1.1proc macro
openssl-src300.6.1+3.6.3
pkg-config0.3.34
portable-atomic1.14.0build script, not run
portable-atomic-util0.2.7build script, not run
proc-macro21.0.107build script
quote1.0.47build script
redox_users0.5.2
serde_derive1.0.229proc macro
shlex2.0.1
strum_macros0.28.0proc macro
syn2.0.119
syn3.0.3
thiserror-impl2.0.19proc macro
unicode-ident1.0.24
vcpkg0.2.15prebuilt objects
wasi0.11.1+wasi-snapshot-preview1
windows-link0.2.1
windows-sys0.61.2
Vulnerabilities2PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0333noyalib0.0.5>=0.0.53highResource budgets not enforced on the typed deserialization pathretained
GHSA-hhw4-xg65-fp2xserde_yml0.0.13none publishedmediumserde_yml crate is unsound and unmaintainedretained

Raw data

capture
1.3 MB
records
418,247
bytes per record
3.1

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run 48ae414e-5307-4a36-b2ea-2194fc937f97

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2