Skip to content
Open-Source Registry

cargo / qk-cli / 0.7.0

qk-cli 0.7.0

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RisklowVulnshigh
processes
936
operations
311K
packages
313
compiler runs
459
connections
1
job time
4m 23s
capture
2.5 MB
records
511K
bytes / record
4.8

Build behaviourcompiled C/C++

run a72a14cb-b227-40c3-b7f0-9dd1c13736ea · built 2026-10-16 · complete View on crates.io

Graph

binary · retained · product · graph v2
3

Checks

11 of 14 clear Cross-process access Known vulnerabilities +1 more
Build behavior✓✓▲✓✓✓✓✓
Supply chain▲✓▲✓✓
Pipeline✓

Detections

1
  • Process read another process's memory or registers
    strace
    low

Detection

lowwitnessed

Process read another process's memory or registers

Cross-process access

Subject
strace
Jobs
build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via ptrace + process_vm/proc-mem — attach ×12 · read ×74, across 43 processes

    target strace

    by /usr/bin/strace -ff -ttt -yy -qq -s 4096 -e trace=%file,%process,getdents64,fchdir,close,dup,dup2,dup3,getcwd -e raw=execve,execveat -o /tmp/qk-input-analysis-N…

  2. Process relationshipmitigation

    Every target is a child or ancestor of the accessing process.

  3. Recognized debuggermitigation

    Recognized debugger; severity is limited by policy.

  4. Process detailscontext

    actor: strace (pid 32249) — /usr/bin/strace -ff -ttt -yy -qq -s 4096 -e trace=%file,%process,getdents64,fchdir,close,dup,dup2,dup3,getcwd -e raw=execve,execveat -o /tmp/qk-input-analysis-N…, and 11 more processes of the same program

    subject strace

  5. Process detailscontext

    target: strace (pid 32258) — /usr/bin/strace -ff -ttt -yy -qq -s 4096 -e trace=%file,%process,getdents64,fchdir,close,dup,dup2,dup3,getcwd -e raw=execve,execveat -o /tmp/qk-input-analysis-N…

    target strace

  6. Process detailscontext

    target: dash (pid 32258) — /bin/sh -c exec /bin/true

    target sh

  7. Process detailscontext

    target: strace (pid 32261) — /usr/bin/strace -ff -ttt -yy -qq -s 4096 -e trace=%file,%process,getdents64,fchdir,close,dup,dup2,dup3,getcwd -e raw=execve,execveat -o /tmp/qk-input-analysis-z…

    target strace

  8. Process detailscontext

    target: dash (pid 32261) — /bin/sh -c exec /bin/true

    target sh

  9. Process detailscontext

    target: gnutrue (pid 32258) — /bin/true

    target true

  10. Additional itemscontext

    … +38 more target processes

What came before it · build-test

Loading the graph

What came before it · build-test

Loading the graph

Processes

build-test

cargo›cargo›execution-60dee9126097459a›qk›strace

Ran
/usr/bin/strace -ff -ttt -yy -qq -s 4096 -e trace=%file,%process,getdents64,fchdir,close,dup,dup2,dup3,getcwd -e raw=execve,execveat -o /tmp/qk-input-analysis-N…
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 5 processes
  1. cargocargo test --release --locked --no-fail-fast7346
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast7346
  3. execution-60dee9126097459a/home/runner/work/qk/qk/target/release/deps/execution-60dee9126097459a34039
  4. qk/home/runner/work/qk/qk/target/release/qk --workspace /tmp/.tmpkYZVBv inputs analyze app:long --report cancelled.json32265
  5. strace/usr/bin/strace -ff -ttt -yy -qq -s 4096 -e trace=%file,%process,getdents64,fchdir,close,dup,dup2,dup3,getcwd -e raw=execve,execveat -o /tmp/qk-input-analysis-N…32249

build-test

cargo›cargo›execution-60dee9126097459a›qk›strace

Ran
/usr/bin/strace -ff -ttt -yy -qq -s 4096 -e trace=%file,%process,getdents64,fchdir,close,dup,dup2,dup3,getcwd -e raw=execve,execveat -o /tmp/qk-input-analysis-N…
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 5 processes
  1. cargocargo test --release --locked --no-fail-fast7346
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast7346
  3. execution-60dee9126097459a/home/runner/work/qk/qk/target/release/deps/execution-60dee9126097459a34039
  4. qk/home/runner/work/qk/qk/target/release/qk --workspace /tmp/.tmpkYZVBv inputs analyze app:long --report cancelled.json32265
  5. strace/usr/bin/strace -ff -ttt -yy -qq -s 4096 -e trace=%file,%process,getdents64,fchdir,close,dup,dup2,dup3,getcwd -e raw=execve,execveat -o /tmp/qk-input-analysis-N…32249

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (qk) via crates.io · 20,122 files · went into an output ecosystem
Vulnerabilities5PackageFixSeverity
RUSTSEC-2026-0346rustls 0.23.45>=0.23.46high
RUSTSEC-2026-0347rustls 0.23.45>=0.23.46high
RUSTSEC-2026-0348rustls 0.23.45>=0.23.46high
RUSTSEC-2026-0349rustls 0.23.45>=0.23.46high
RUSTSEC-2024-0449unsafe-libyaml 0.2.11none publishedlow
Dependencies334Build behaviour
ahash0.8.12build script
aho-corasick1.1.5
allocator-api20.2.21
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.104build script
arrayvec0.7.8
base640.23.1
bitflags2.13.2
blake31.8.7build script
block-buffer0.12.1
bstr1.13.1
bytecount0.6.9
bytes1.12.1
castaway0.2.4
cfg-if1.0.5
clap4.6.7
clap_builder4.6.7
clap_lex1.1.1
cmov0.5.4
colorchoice1.0.5
command-group5.0.1
compact_str0.10.0
const-oid0.10.2
constant_time_eq0.4.2
cow-utils0.1.3
cpufeatures0.3.1
crc32fast1.5.2build script
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-utils0.8.23build script
crypto-common0.2.2
ctrlc3.5.2
ctutils0.4.2
dashmap6.2.1
digest0.11.3
dotenvy0.15.7
dragonbox_ecma0.1.12build script
dunce1.0.5
either1.19.0
equivalent1.0.2
fallible-iterator0.3.0
fallible-streaming-iterator0.1.9
fallout0.4.3
fast-glob1.1.2
fastrand2.5.0
flate21.1.10
float-cmp0.10.0
foldhash0.2.0
form_urlencoded1.2.2
fs20.4.3
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
globset0.4.20
halfbrown0.4.0
hashbrown0.14.5
hashbrown0.16.1
hashbrown0.17.1
hashlink0.12.2
hmac0.13.0
http1.5.0
httparse1.10.1build script
hybrid-array0.4.15
icu_collections2.3.0
icu_locale_core2.3.0
icu_locale_fallback2.3.0
icu_locale_fallback_data2.3.0build script
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
icu_segmenter2.3.0
icu_segmenter_data2.3.0build script
idna1.1.0
idna_adapter1.2.2
ignore0.4.33
indexmap2.14.2
inotify0.11.5
inotify-sys0.1.8build script
instant-xml0.7.6
is_terminal_polyfill1.70.2
itertools0.15.0
itoa1.0.18
jiff0.2.37
jiff-core0.1.1
json-strip-comments3.1.2
jsonc-parser0.32.4
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libsqlite3-sys0.38.2build script
linux-raw-sys0.12.1
litemap0.8.3
lock_api0.4.14
log0.4.34
md-50.11.0
memchr2.8.3
miniz_oxide0.9.1
mio1.2.3
nix0.27.1
nix0.31.3build script
nodejs-built-in-modules1.0.0
nonmax0.5.5
notify8.2.0
notify-types2.1.0
num-bigint0.5.1
num-integer0.1.47
num-traits0.2.19build script
once_cell1.21.4
oxc_allocator0.150.0
oxc_ast0.150.0
oxc_ast_visit0.150.0
oxc_data_structures0.150.0
oxc_diagnostics0.150.0
oxc_ecmascript0.150.0
oxc_estree0.150.0
oxc_index5.0.0
oxc_parser0.150.0
oxc_regular_expression0.150.0
oxc_resolver11.24.3
oxc_semantic0.150.0
oxc_span0.150.0
oxc_str0.150.0
oxc_syntax0.150.0
parking_lot_core0.9.12build script
percent-encoding2.3.2
phf0.14.0
phf_shared0.14.0
pin-project-lite0.2.17
potential_utf0.1.6
qk-affected0.7.0
qk-cache0.7.0
qk-config0.7.0
qk-executor0.7.0
qk-graph0.7.0
qk-history0.7.0
qk-input-analysis0.7.0
qk-lockfile0.7.0
qk-runner0.7.0
qk-taskgraph0.7.0
rayon1.12.0
rayon-core1.13.0build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
ring0.17.14build scriptprebuilt objects
rusqlite0.40.2
rustc-hash2.1.3
rustix1.1.5build script
rustls0.23.45build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rusty-s30.10.2
ryu1.0.23
same-file1.0.6
scopeguard1.2.0
self_cell1.3.0
serde1.0.229build script
serde_core1.0.229build script
serde_json1.0.151build script
serde_spanned1.1.1
serde_yaml_ng0.10.0
sha20.11.0
shlex2.0.1
simd-adler320.3.10
simd-json0.18.1
simdutf80.1.5
siphasher1.0.4
smallvec1.16.2
smawk0.3.3
stable_deref_trait1.2.1
static_assertions1.1.0
streaming-iterator0.1.9
strsim0.11.1
subtle2.6.1
sysinfo0.39.6
tempfile3.27.0
terminal_size0.4.4
textwrap0.16.4
thiserror2.0.21build script
tinystr0.8.4
toml1.1.6+spec-1.1.0
toml_datetime1.1.1+spec-1.1.0
toml_parser1.1.3+spec-1.1.0
toml_writer1.1.2+spec-1.1.0
tracing0.1.44
tracing-core0.1.36
tree-sitter0.27.0build script
tree-sitter-css0.25.0build script
tree-sitter-language0.1.8build script
tree-sitter-scss1.0.0build script
typenum1.20.1
unicode-id-start1.5.0
unicode-segmentation1.13.3
unicode-width0.2.2
unsafe-libyaml0.2.11
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.4
url2.5.8
utf8-zero0.8.1
utf8_iter1.0.4
utf8parse0.2.2
value-trait0.12.2
walkdir2.5.0
webpki-roots1.0.9
winnow1.0.4
writeable0.6.4
xmlparser0.13.6
yoke0.8.3
zerocopy0.8.61build script
zerofrom0.1.8
zeroize1.9.0
zerotrie0.2.5
zerovec0.11.8
zmij1.0.23build script
zstd0.13.3
zstd-safe7.3.0build script
zstd-sys2.1.0+zstd.1.5.7build script
adler22.0.1
fixedbitset0.5.7
foldhash0.1.5
hashbrown0.15.5
petgraph0.8.3
ref-cast1.0.27build script
unicode-ident1.0.26
anstyle-wincon3.0.11
autocfg1.5.1
bitflags1.3.2
block20.6.2
bumpalo3.20.3
cc1.5.1
cfg_aliases0.2.2
clap_derive4.6.7proc macro
defmt1.1.1build script, not run
defmt-macros1.1.1build script, not runproc macro
defmt-parser1.0.0
dispatch20.3.1
displaydoc0.2.7proc macro
errno0.3.14
find-msvc-tools0.1.14
fsevent-sys4.1.0
heck0.5.0
instant-xml-macros0.7.2proc macro
jiff-static0.2.37proc macro
jobserver0.1.35
js-sys0.3.106
kqueue1.2.1
kqueue-sys1.1.2
ntapi0.4.3build script, not run
objc20.6.4build script, not run
objc2-core-foundation0.3.2
objc2-encode4.1.0
objc2-io-kit0.3.2
once_cell_polyfill1.70.2
oxc_ast_macros0.150.0proc macro
phf_generator0.14.0
phf_macros0.14.0proc macro
pkg-config0.3.34
portable-atomic1.15.0build script, not run
portable-atomic-util0.2.8build script, not run
proc-macro21.0.107build script
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
redox_syscall0.5.18
ref-cast-impl1.0.27proc macro
rsqlite-vfs0.1.1
rustversion1.0.23build scriptproc macro
seq-macro0.3.6proc macro
serde_derive1.0.229proc macro
sqlite-wasm-rs0.5.5build script, not run
syn2.0.119
syn3.0.6
synstructure0.14.0
thiserror-impl2.0.21proc macro
tracing-attributes0.1.31proc macro
vcpkg0.2.15prebuilt objects
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
winapi0.3.9build script, not run
winapi-i686-pc-windows-gnu0.4.0build script, not runprebuilt objects
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0build script, not runprebuilt objects
windows0.62.2
windows-collections0.3.2
windows-core0.62.2
windows-future0.3.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-numerics0.3.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.52.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.52.6
windows-targets0.53.5
windows-threading0.2.1
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
wit-bindgen0.57.1build script, not runprebuilt objects
yoke-derive0.8.3proc macro
zerocopy-derive0.8.61proc macro
zerofrom-derive0.1.8proc macro
zerovec-derive0.11.6proc macro
zlib-rs0.6.8
Versions10RiskVulnsPublished
0.6.12d ago
0.6.08d ago
0.5.0not analyzed8d ago
0.4.0not analyzed10d ago
0.3.1not analyzed12d ago
0.3.0not analyzed12d ago
0.2.0not analyzed13d ago
0.1.1not analyzed2026-10-02
0.0.0not analyzed2026-09-29
0.7.0lowhigh

Raw data

capture
2.5 MB
records
510,532
bytes per record
4.8

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run a72a14cb-b227-40c3-b7f0-9dd1c13736ea

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2