Skip to content
Open-Source Registry

cargo / sctrace / 0.19.0

sctrace 0.19.0

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RisklowVulnsnone
processes
306
operations
8.5K
packages
46
compiler runs
32
connections
1
job time
19s
capture
129 KB
records
15K
bytes / record
8.3

Build behaviourcompiled and nothing more

run 28012263-b0fa-43b1-9011-1286805e45d1 · built 2026-10-13 · complete View on crates.io

Artifact

binary · retained · product · graph v2
2

Checks

13 of 14 clear Cross-process access
Build behavior✓✓▲✓✓✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Process read another process's memory or registers
    strace
    low

Detection

lowwitnessed

Process read another process's memory or registers

Cross-process access

Subject
strace
Jobs
build-test, build-test
Rule
process-access

Evidence

  1. Cross-process accesscause

    via ptrace + process_vm/proc-mem — attach ×1 · read ×4, across 4 processes

    target strace

    by strace -o /proc/self/fd/4 -yy -f sh -c /bin/true

  2. Process relationshipmitigation

    Every target is a child or ancestor of the accessing process.

  3. Recognized debuggermitigation

    Recognized debugger; severity is limited by policy.

  4. Process detailscontext

    actor: strace (pid 3058) — strace -o /proc/self/fd/4 -yy -f sh -c /bin/true

    subject strace

  5. Process detailscontext

    target: strace (pid 3064) — strace -o /proc/self/fd/4 -yy -f sh -c /bin/true

    target strace

  6. Process detailscontext

    target: dash (pid 3064) — sh -c /bin/true

    target sh

  7. Process detailscontext

    target: dash (pid 3065) — sh -c /bin/true

    target sh

  8. Process detailscontext

    target: gnutrue (pid 3065) — /bin/true

    target true

Processes

build-test

cargo›cargo›integration_test-6a22a3c4eaa72625›strace

Ran
strace -o /proc/self/fd/4 -yy -f sh -c /bin/true
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 4 processes
  1. cargocargo test --release --locked --no-fail-fast2980
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2980
  3. integration_test-6a22a3c4eaa72625/home/runner/work/asterinas/asterinas/target/release/deps/integration_test-6a22a3c4eaa726253055
  4. stracestrace -o /proc/self/fd/4 -yy -f sh -c /bin/true3058

build-test

cargo›cargo›integration_test-6a22a3c4eaa72625›strace

Ran
strace -o /proc/self/fd/4 -yy -f sh -c /bin/true
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 4 processes
  1. cargocargo test --release --locked --no-fail-fast2980
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2980
  3. integration_test-6a22a3c4eaa72625/home/runner/work/asterinas/asterinas/target/release/deps/integration_test-6a22a3c4eaa726253055
  4. stracestrace -o /proc/self/fd/4 -yy -f sh -c /bin/true3058

Remediation

Identify the owning job step and target process. Review a policy exception for expected debugger or profiler activity; investigate other cross-process access.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (asterinas) via crates.io · 2,085 files · went into an output ecosystem
Dependencies46Build behaviour
anstream0.6.20
anstyle1.0.11
anstyle-parse0.2.7
anstyle-query1.1.4
bitflags2.9.4
cfg-if1.0.3
clap4.5.47
clap_builder4.5.47
clap_derive4.5.47proc macro
clap_lex0.7.5
colorchoice1.0.4
heck0.5.0
is_terminal_polyfill1.70.1
ld-linux-x86-64.so.2system library
libc0.2.187build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
memchr2.7.5
nix0.27.1
nom7.1.3
proc-macro21.0.101build script
quote1.0.40
strsim0.11.1
syn2.0.106
unicode-ident1.0.19
utf8parse0.2.2
aho-corasick1.1.3
minimal-lexical0.2.1
regex1.11.2
regex-automata0.4.10
regex-syntax0.8.6
anstyle-wincon3.0.10
once_cell_polyfill1.70.1
windows-link0.1.3
windows-sys0.60.2
windows-targets0.53.3
windows_aarch64_gnullvm0.53.0build script, not runprebuilt objects
windows_aarch64_msvc0.53.0build script, not runprebuilt objects
windows_i686_gnu0.53.0build script, not runprebuilt objects
windows_i686_gnullvm0.53.0build script, not runprebuilt objects
windows_i686_msvc0.53.0build script, not runprebuilt objects
windows_x86_64_gnu0.53.0build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.0build script, not runprebuilt objects
windows_x86_64_msvc0.53.0build script, not runprebuilt objects
Versions14RiskVulnsPublished
0.19.04d ago
0.18.1not analyzed2026-08-18
0.18.0not analyzed2026-06-03
0.17.2not analyzed2026-05-10
0.17.1not analyzed2026-03-12
0.17.0not analyzed2025-12-13
0.16.2not analyzed2025-12-09
0.1.7not analyzed2025-11-20
0.1.6not analyzed2025-11-19
0.1.4not analyzed2025-11-11
0.1.3not analyzed2025-11-11
0.1.2not analyzed2025-11-11
0.1.1not analyzed2025-11-11
0.1.0not analyzed2025-11-11

Raw data

capture
129 KB
records
15,473
bytes per record
8.3

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-13 · run 28012263-b0fa-43b1-9011-1286805e45d1

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2