Skip to content
Open-Source Registry

cargo / libscap-bindings / 0.0.11

libscap-bindings 0.0.11

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnsnone
processes
1,012
operations
151K
packages
91
compiler runs
802
connections
5
job time
2m 04s
capture
1.5 MB
records
250K
bytes / record
6.0

Build behaviourits build script reached codeload.github.com, github.com, release-assets.githubusercontent.comits build script ran gitundeclared fetchfetch went into the outputfetched outside crates.iocompiled C/C++

run 998019b6-383e-4673-8a7e-8cac5baaa6df · built 2026-10-15 · complete View on crates.io

Graph

egress · high · in liblibscap_bindings.rlib
2

Checks

9 of 14 clear · 2 not checked Network activity Build script activity +1 more
Build behavior▲✓✓✓▲✓✓✓
Supply chain○▲○✓✓
Pipeline✓

Detections

2
  • Build script ran a program it downloaded
    libscap-bindings 0.0.11 › release-assets.githubusercontent.com:443
    high
  • Build script fetched what the build compiled, linked or ran
    libscap-bindings 0.0.11 › github.com:443, release-assets.githubusercontent.com:443, codeload.github.com:443
    high

Detection

highwitnessed

Build script ran a program it downloaded

Unexpected build script activity

Subject
libscap-bindings 0.0.11
Destination
release-assets.githubusercontent.com:443
Jobs
build-test
Rule
buildscript · libscap-bindings

Witness chain

  1. release-assets.githubusercontent.com:443
    source
  2. /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap/bpftool/bpftoolvia /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-4484e67d02b49e4f/build-script-build
    • Build-time code ran a program downloaded during the buildfrom release-assets.githubusercontent.com:443by bpftool

      ran /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap/bpftool/bpftool, downloaded during the build by build-script-build from release-assets.githubusercontent.com:443

    subject
  3. build
    artifact

Evidence

  • ran /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap/bpftool/bpftool, downloaded during the build by build-script-build from release-assets.githubusercontent.com:443

Processes

build-test

cargo›cargo›build-script-build›…›sh›bpftool

Ran
/home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap/bpftool/bpftool gen object /home…
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 10 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2547
  2. cargo/home/runner/.rustup/toolchains/1.95.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2547
  3. build-script-build/home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-4484e67d02b49e4f/build-script-build3791
  4. cmakecmake --build /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/out/build --target scap --config Releas…4007
  5. gmake/usr/bin/gmake -f Makefile scap4008
  6. gmake/usr/bin/gmake -s -f CMakeFiles/Makefile2 scap4011
  7. gmake/usr/bin/gmake -s -f CMakeFiles/Makefile2 libscap/CMakeFiles/scap.dir/all4015
  8. gmake/usr/bin/gmake -s -f driver/modern_bpf/CMakeFiles/ProbeSkeleton.dir/build.make driver/modern_bpf/CMakeFiles/ProbeSkeleton.dir/build5279
  9. sh/bin/sh -c cd /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/out/build/driver/modern_bpf && /home/ru…6046
  10. bpftool/home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap/bpftool/bpftool gen object /home…6047

Remediation

A dependency's build downloaded a program and ran it, outside anything the registry checksums. Review what the program did, rotate any credential the build could read, and pin or replace the dependency.

Detection

highwitnessed

Build script fetched what the build compiled, linked or ran

Unexpected network connection

Subject
libscap-bindings 0.0.11
Destination
github.com:443, release-assets.githubusercontent.com:443, codeload.github.com:443
Reaches
Jobs
build-test
Rule
egress · target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build_script_build-4484e67d02b49e4f

    subject github.com:443

    by /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-4484e67d02b49e4f/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by git-remote-http

    subject github.com:443

    by /usr/lib/git-core/git-remote-https origin https://github.com/falcosecurity/libs.git

  3. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build_script_build-4484e67d02b49e4f

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-4484e67d02b49e4f/build-script-build

  4. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by cmake

    subject github.com:443

    by /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/o…

  5. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by cmake

    subject release-assets.githubusercontent.com:443

    by /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/o…

  6. Connection outside the process’s allowed destinationscause

    connection to codeload.github.com:443, opened by cmake

    subject codeload.github.com:443

    by /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/o…

  7. What a build script's fetch becamesupport

    14 files came down; the build compiled or linked 7630127827874169708detect_compiler_family.c, 1917912291258669122detect_compiler_family.c, enums.rs +2 more and ran bpftool

  8. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-4484e67d02b49e4f/build_script_build-4484e67d02b49e4f

  9. Tool commandsupport

    Command: /usr/lib/git-core/git-remote-https origin https://github.com/falcosecurity/libs.git

    by /usr/lib/git-core/git-remote-https origin https://github.com/falcosecurity/libs.git

  10. Tool commandsupport

    Command: /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/o…

    by /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/o…

  11. Tool commandsupport

    Command: /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/o…

    by /usr/bin/cmake -DCMAKE_MESSAGE_LOG_LEVEL=VERBOSE -P /home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-8f2171aa594bab43/o…

In liblibscap_bindings.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-4484e67d02b49e4f/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2547
  2. cargo/home/runner/.rustup/toolchains/1.95.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2547
  3. build-script-build/home/runner/work/libscap-bindings/libscap-bindings/target/release/build/libscap-bindings-4484e67d02b49e4f/build-script-build3791

Remediation

A dependency's build downloaded files the build then compiled, linked or ran, outside anything the registry checksums. Review what came down, pin or replace the dependency, or record the download as accepted once it is reviewed.

Network

5 peers
  • codeload.github.com:443 libscap-bindings's own build code · cmake (target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap) · GitHub, Inc. · 2 files undeclared
  • github.com:443 libscap-bindings's own build code · build_script_build-4484e67d02b49e4f (target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap); cmake (target/release/build/libscap-bindings-8f2171aa594bab43/out/build/_deps/libelf_elftoolchain-subbuild); git-remote-http · GitHub, Inc. · 14 files · went into an output undeclared
  • release-assets.githubusercontent.com:443 libscap-bindings's own build code · build_script_build-4484e67d02b49e4f (target/release/build/libscap-bindings-8f2171aa594bab43/out/external-libscap); cmake (target/release/build/libscap-bindings-8f2171aa594bab43/out/build/_deps/libelf_elftoolchain-subbuild) · Fastly, Inc. · 10 files · went into an output undeclared
  • static.crates.io:8080 the package manager · cargo (libscap-bindings) via crates.io · 5,569 files · went into an output ecosystem
  • static.rust-lang.org:443 the toolchain installer · rustup (libscap-bindings) via Package registries profile (rustup → asn:54113) · Fastly, Inc. · 13 files ecosystem
Dependencies103Build behaviour
aho-corasick1.1.4
anyhow1.0.104build script
async-trait0.1.89proc macro
base640.23.1
bindgen0.73.2build script
bitflags2.11.1
block-buffer0.10.4
bytes1.11.0
cc1.2.46
cexpr0.6.0
cfg-if1.0.4
clang-sys1.8.1build script
cmake0.1.58
cpufeatures0.2.17
crypto-common0.1.7
digest0.10.7
errno0.3.14
filetime0.2.26
find-msvc-tools0.1.5
flate21.1.10
fnv1.0.7
generic-array0.14.7build script
getrandom0.2.16
glob0.3.3
heck0.5.0
hex0.4.3
http1.3.1
httparse1.10.1build script
itoa1.0.15
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libclang-21.so.21system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libredox0.1.10
linux-raw-sys0.11.0
log0.4.28
memchr2.7.6
minimal-lexical0.2.1
nom7.1.3
once_cell1.21.3
percent-encoding2.3.2
pin-project-lite0.2.16
prettyplease0.2.37build script
proc-macro21.0.103build script
quote1.0.42build script
redox_syscall0.5.18
regex1.12.2
regex-automata0.4.13
regex-syntax0.8.8
ring0.17.14build scriptprebuilt objects
rustc-hash2.1.1
rustix1.1.2build script
rustls0.23.35build script
rustls-pki-types1.13.0
rustls-webpki0.103.8
sha20.10.9
sha2561.6.0
shlex1.3.0
shlex2.0.1
strum0.28.0
strum_macros0.28.0proc macro
subtle2.6.1
syn2.0.110
tar0.4.46
tokio1.48.0
typenum1.19.0build script
unicode-ident1.0.22
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.4
utf8-zero0.8.1
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
webpki-roots1.0.9
windows-link0.2.1
windows-sys0.52.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
xattr1.6.1
zeroize1.8.2
zlib-rs0.6.0
Microsoft.Build.NoTargets3.5.6
Versions11RiskVulnsPublished
0.0.109d ago
0.0.9not analyzed2026-07-24
0.0.8not analyzed2026-06-05
0.0.7not analyzed2026-04-20
0.0.6not analyzed2026-03-02
0.0.5not analyzed2026-02-05
0.0.4not analyzed2026-02-02
0.0.3not analyzed2026-01-06
0.0.2not analyzed2025-11-17
0.0.1not analyzed2025-11-14
0.0.11highnone

Raw data

capture
1.5 MB
records
249,987
bytes per record
6.0

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-15 · run 998019b6-383e-4673-8a7e-8cac5baaa6df

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2