Skip to content
Open-Source Registry

cargo / omniference / 0.3.4

omniference 0.3.4

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection11 vulnerabilities
processes
222
operations
44K
packages
214
compiler runs
280
connections
2
job time
3m 21s
capture
588 KB
records
80K
bytes / record
7.3

Build behaviourcompiled and nothing more

run bb0e587e-b44c-4a3a-b758-ecf5255b0cd7 · built 2026-10-14 · complete

Graph

binary · retained · product · graph v2
3

Checks

10 of 14 clear Sensitive data access and transfer Known vulnerabilities +2 more
Build behavior✓▲✓✓✓✓✓✓
Supply chain▲▲▲✓✓
Pipeline✓

Detections

1
  • Code this build ran used live credentials
    omniference_tests-8f479c1fd3f4cb8e › api.openai.com:443
    info

Detection

infowitnessed

Code this build ran used live credentials

Credentials used by code the build ran

Subject
omniference_tests-8f479c1fd3f4cb8e
Destination
api.openai.com:443
Jobs
build-test
Rule
credential-use · omniference

Evidence

  1. Connected after reading a credential storecause

    omniference_tests-8f479c1fd3f4cb8e connected to api.openai.com:443 after reading /home/runner/work/omniference/omniference/.env

    source /home/runner/work/omniference/omniference/.envtarget api.openai.com:443

    by /home/runner/work/omniference/omniference/target/release/deps/omniference_tests-8f479c1fd3f4cb8e

What led to it

Loading the graph

Processes

build-test

cargo›cargo›omniference_tests-8f479c1fd3f4cb8e

Ran
/home/runner/work/omniference/omniference/target/release/deps/omniference_tests-8f479c1fd3f4cb8e
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast4898
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast4898
  3. omniference_tests-8f479c1fd3f4cb8e/home/runner/work/omniference/omniference/target/release/deps/omniference_tests-8f479c1fd3f4cb8e5152

Remediation

A program this build made read a credential store and connected to the service it is for. Tests that need the runner's credentials make real calls with them; run them on a runner whose credentials are scoped to that, or record the use as accepted once it is reviewed.

Network

2 peers
  • api.openai.com:443 omniference's own build code · omniference_tests-8f479c1fd3f4cb8e (omniference) · Cloudflare, Inc. unjudged
  • static.crates.io:8080 the package manager · cargo (omniference) via crates.io · 15,544 files · went into an output ecosystem
Dependencies220Build behaviour
aho-corasick1.1.3
anyhow1.0.99build script
async-stream0.3.6
atomic-waker1.1.2
axum0.8.9
axum-core0.5.6
base640.22.1
bitflags2.9.4
bytes1.10.1
cfg-if1.0.3
encoding_rs0.8.35
equivalent1.0.2
fnv1.0.7
foreign-types0.3.2
foreign-types-shared0.1.1
form_urlencoded1.2.2
futures-channel0.3.31
futures-core0.3.31
futures-io0.3.31
futures-sink0.3.31
futures-task0.3.31
futures-util0.3.31
getrandom0.3.3build script
h20.4.12
hashbrown0.15.5
http1.3.1
http-body1.0.1
http-body-util0.1.3
httparse1.10.1build script
httpdate1.0.3
hyper1.7.0
hyper-tls0.6.0
hyper-util0.1.16
icu_collections2.0.0
icu_locale_core2.0.0
icu_normalizer2.0.0
icu_normalizer_data2.0.0build script
icu_properties2.0.1
icu_properties_data2.0.1build script
icu_provider2.0.0
idna1.1.0
idna_adapter1.2.1
include_dir0.7.4
indexmap2.11.1
ipnet2.11.0
iri-string0.7.8
itoa1.0.15
lazy_static1.5.0
ld-linux-x86-64.so.2system library
libc0.2.175build script
libc.so.6system library
libcrypto.so.3system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libssl.so.3system library
litemap0.8.0
lock_api0.4.13build script
log0.4.28
matchers0.2.0
matchit0.8.4
memchr2.7.5
mime0.3.17
mime_guess2.0.5build script
mio1.0.4
native-tls0.2.14build script
nu-ansi-term0.50.1
once_cell1.21.3
openssl0.10.73build script
openssl-probe0.1.6
openssl-sys0.9.109build script
parking_lot0.12.4
parking_lot_core0.9.11build script
percent-encoding2.3.2
pin-project-lite0.2.16
pin-utils0.1.0
potential_utf0.1.3
regex1.11.2
regex-automata0.4.10
regex-syntax0.8.6
reqwest0.12.23
rustls-pki-types1.12.0
ryu1.0.20
scopeguard1.2.0
serde1.0.229build script
serde_core1.0.229build script
serde_json1.0.143build script
serde_path_to_error0.1.17
serde_spanned0.6.9
serde_urlencoded0.7.1
sharded-slab0.1.7
signal-hook-registry1.4.6
slab0.4.11
smallvec1.15.1
socket20.6.0
stable_deref_trait1.2.0
sync_wrapper1.0.2
thiserror1.0.69build script
thread_local1.1.9
tinystr0.8.1
tokio1.47.1
tokio-native-tls0.3.1
tokio-util0.7.16
toml0.8.23
toml_datetime0.6.11
toml_edit0.22.27
toml_write0.1.2
tower0.5.2
tower-http0.6.6
tower-layer0.3.3
tower-service0.3.3
tracing0.1.41
tracing-core0.1.34
tracing-log0.2.0
tracing-subscriber0.3.20
try-lock0.2.5
unicase2.8.1
url2.5.7
utf8_iter1.0.4
uuid1.18.1
want0.3.1
winnow0.7.15
writeable0.6.1
yoke0.8.0
zerofrom0.1.6
zeroize1.8.1
zerotrie0.2.2
zerovec0.11.4
dotenvy0.15.7
futures0.3.31
futures-executor0.3.31
tokio-stream0.1.17
unicode-ident1.0.19
addr2line0.24.2
adler22.0.1
async-stream-impl0.3.6proc macro
async-trait0.1.89proc macro
autocfg1.5.0
backtrace0.3.75
bumpalo3.19.0
cc1.2.36
core-foundation0.9.4
core-foundation-sys0.8.7
displaydoc0.2.5proc macro
errno0.3.14
fastrand2.3.0
find-msvc-tools0.1.1
futures-macro0.3.31proc macro
getrandom0.2.16
gimli0.31.1
hyper-rustls0.27.7
include_dir_macros0.7.4proc macro
io-uring0.7.10build script, not run
js-sys0.3.78
linux-raw-sys0.11.0
miniz_oxide0.8.9
object0.36.7build script, not run
openssl-macros0.1.1proc macro
pkg-config0.3.32
proc-macro21.0.101build script
quote1.0.40
r-efi5.3.0
redox_syscall0.5.17
ring0.17.14build script, not runprebuilt objects
rustc-demangle0.1.26
rustix1.1.2build script, not run
rustls0.23.31build script, not run
rustls-webpki0.103.4
rustversion1.0.22build script, not runproc macro
schannel0.1.28
security-framework2.11.1
security-framework-sys2.15.0
serde_derive1.0.229proc macro
shlex1.3.0
subtle2.6.1
syn2.0.106
syn3.0.3
synstructure0.13.2
system-configuration0.6.1
system-configuration-sys0.6.0build script, not run
tempfile3.22.0
thiserror-impl1.0.69proc macro
tokio-macros2.5.0proc macro
tokio-rustls0.26.2
tracing-attributes0.1.30proc macro
untrusted0.9.0
valuable0.1.1build script, not run
vcpkg0.2.15prebuilt objects
wasi0.11.1+wasi-snapshot-preview1
wasi0.14.5+wasi-0.2.4
wasip21.0.0+wasi-0.2.4
wasm-bindgen0.2.101build script, not run
wasm-bindgen-backend0.2.101
wasm-bindgen-futures0.4.51
wasm-bindgen-macro0.2.101proc macro
wasm-bindgen-macro-support0.2.101
wasm-bindgen-shared0.2.101build script, not run
wasm-streams0.4.2
web-sys0.3.78
windows-link0.1.3
windows-link0.2.0
windows-registry0.5.3
windows-result0.3.4
windows-strings0.4.2
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.61.0
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
wit-bindgen0.45.1build script, not runprebuilt objects
yoke-derive0.8.0proc macro
zerofrom-derive0.1.6proc macro
zerovec-derive0.11.1proc macro
Vulnerabilities11PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0258h20.4.12>=0.4.16highh2 unbounded empty DATA framesretained
CVE-2026-41676openssl0.10.73>=0.10.78highrust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1retained
CVE-2026-41678openssl0.10.73>=0.10.78highrust-openssl has incorrect bounds assertion in aes key wrapretained
CVE-2026-41681openssl0.10.73>=0.10.78highrust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length checkretained
CVE-2026-41898openssl0.10.73>=0.10.78highrust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peerretained
CVE-2026-42327openssl0.10.73>=0.10.79highrust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLsretained
CVE-2026-25541bytes1.10.1>=1.11.1mediumbytes has integer overflow in BytesMut::reserveretained
CVE-2026-44662openssl0.10.73>=0.10.79mediumrust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-paddingretained
CVE-2026-45784openssl0.10.73>=0.10.80mediumrust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphersretained
RUSTSEC-2026-0190anyhow1.0.99>=1.0.103lowUnsoundness in `Error::downcast_mut()`retained
CVE-2026-41677openssl0.10.73>=0.10.78lowrust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized lengthretained

Raw data

capture
588 KB
records
80,299
bytes per record
7.3

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-14 · run bb0e587e-b44c-4a3a-b758-ecf5255b0cd7

analysis 0.1.0 · 2026-10-14 · efb1d7d · graph v2