Skip to content
Open-Source Registry

cargo / scx_cake

scx_cake 1.2.2

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnsnone
processes
531
operations
48K
packages
165
compiler runs
311
connections
1
job time
1m 59s
capture
513 KB
records
81K
bytes / record
6.3

A sched_ext scheduler applying CAKE bufferbloat concepts to CPU scheduling

Build behaviourhas a build scriptcompiled C/C++

136 downloads View on crates.io

Graph

object-provenance · high · in scx_cake
2

Checks

12 of 14 clear Data flow analysis Build-time dependency advisories
Build behavior✓✓✓✓✓▲✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Could not verify how this object file was built
    bpf.bpf.o
    high

Detection

highwitnessed

Could not verify how this object file was built

Object file origin needs review

Subject
/home/runner/work/scx_cake/scx_cake/target/release/build/scx_cake-4609eddb71f46ab5/out/bpf.bpf.owritten by build_script_build-73084d9f72c24548
Jobs
build-test
Rule
object-provenance · scx_cake

Witness chain

  1. /home/runner/work/scx_cake/scx_cake/src/bpf/intf.h
    source
  2. pipe×2build-script-build › rustfmt
    1. pipe/home/runner/work/scx_cake/scx_cake/target/release/build/scx_cake-73084d9f72c24548/build-script-build
    2. pipe/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/rustfmt --edition 2024
  3. /home/runner/work/scx_cake/scx_cake/target/release/build/scx_cake-4609eddb71f46ab5/out/bpf.bpf.ovia /home/runner/work/scx_cake/scx_cake/target/release/build/scx_cake-73084d9f72c24548/build-script-build
    • Obfuscated toolchain bypassfrom pipeby rustfmt

      input a pipe: Written by rustfmt from a pipe without a recorded source compilation

    subject
  4. scx_cake-a8d80920b16ed814member
    artifact

Evidence

  • input a pipe: Written by rustfmt from a pipe without a recorded source compilation

In scx_cake

Loading the graph

Processes

build-test

cargo›cargo›build-script-build›rustfmt›rustfmt

Ran
/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/rustfmt --edition 2024
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 5 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2464
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2464
  3. build-script-build/home/runner/work/scx_cake/scx_cake/target/release/build/scx_cake-73084d9f72c24548/build-script-build5950
  4. rustfmtrustfmt --edition 20245967
  5. rustfmt/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/rustfmt --edition 20245967

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (scx_cake) via crates.io · 8,692 files · went into an output ecosystem
Dependencies167Build behaviour
aho-corasick1.1.5
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.104build script
bitflags2.13.2
bitvec1.1.1
cfg-if1.0.5
clap4.6.7
clap_builder4.6.7
clap_lex1.1.1
colorchoice1.0.5
crossbeam0.8.5
crossbeam-channel0.5.17
crossbeam-deque0.8.8build script
crossbeam-epoch0.9.21build script
crossbeam-queue0.3.14
crossbeam-utils0.8.23build script
ctrlc3.5.2
deranged0.5.8
funty2.0.0
glob0.3.4
hex0.4.3
is_terminal_polyfill1.70.2
itoa1.0.18
lazy_static1.5.1
ld-linux-x86-64.so.2system library
libbpf-rs0.27.2
libbpf-sys1.7.0+v1.7.0build script
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
log0.4.34
memchr2.8.3
nix0.31.3build script
num0.4.3
num-bigint0.4.8
num-complex0.4.6
num-conv0.2.2
num-integer0.1.47
num-iter0.1.46
num-rational0.4.2
num-traits0.2.19build script
num_threads0.1.7
powerfmt0.2.1
proc-macro21.0.107build script
quote1.0.47build script
radium0.7.0build script
regex-automata0.4.18
regex-syntax0.8.11
rustix1.1.5build script
scx_stats1.1.4
scx_utils1.1.4build script
serde1.0.229build script
serde_core1.0.229build script
serde_json1.0.151build script
simplelog0.12.2
sscanf0.5.0
strsim0.11.1
syn2.0.119
tap1.0.1
termcolor1.4.1
terminal_size0.4.4
time0.3.55
time-core0.1.9
unicase2.10.0
unicode-ident1.0.26
unicode-width0.2.2
utf8parse0.2.2
vsprintf2.0.0build script
wyz0.5.1
zmij1.0.23build script
bindgen0.72.1build script
camino1.2.6build script
cargo-platform0.1.9
cargo_metadata0.19.2
cexpr0.6.0
chrono0.4.45
clang-sys1.9.1build script
either1.19.0
fastrand2.5.0
filetime0.2.29
getrandom0.4.3build script
iana-time-zone0.1.65
itertools0.13.0
libbpf-cargo0.27.2
libloading0.8.9
memmap20.9.11
minimal-lexical0.2.1
nom7.1.3
nu-ansi-term0.50.3
once_cell1.21.4
pin-project-lite0.2.17
prettyplease0.2.37build script
regex1.13.1
rustc-hash2.1.3
ruzstd0.8.3
same-file1.0.6
semver1.0.28
sharded-slab0.1.7
shlex1.3.0
smallvec1.16.2
tar0.4.46
tempfile3.27.0
thiserror2.0.21build script
thread_local1.1.10
tracing0.1.44
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
twox-hash2.1.5
version-compare0.2.1
walkdir2.5.0
xattr1.6.1
android_system_properties0.1.6
anstyle-wincon3.0.11
autocfg1.5.1
block20.6.2
bumpalo3.20.3
cc1.6.0
cfg_aliases0.2.2
clap_derive4.6.7proc macro
convert_case0.11.0
core-foundation-sys0.8.7
dispatch20.3.1
errno0.3.14
find-msvc-tools0.1.14
futures-core0.3.34
futures-task0.3.34
futures-util0.3.34
heck0.5.0
iana-time-zone-haiku0.1.2build script, not run
js-sys0.3.106
objc20.6.5build script, not run
objc2-encode4.1.0
once_cell_polyfill1.70.2
paste1.0.15build scriptproc macro
pkg-config0.3.34
r-efi6.0.0
rustversion1.0.23build script, not runproc macro
scx_cargo1.1.4build script
serde_derive1.0.229proc macro
shlex2.0.1
slab0.4.12
sscanf_macro0.5.0proc macro
syn3.0.6
thiserror-impl2.0.21proc macro
time-macros0.2.32proc macro
tracing-attributes0.1.31proc macro
unicode-segmentation1.13.3
valuable0.1.1build script, not run
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
winapi-util0.1.11
windows-core0.62.2
windows-implement0.60.2proc macro
windows-interface0.59.3proc macro
windows-link0.2.1
windows-result0.4.1
windows-strings0.5.1
windows-sys0.61.2
Versions5RiskVulnsPublished
1.2.1not analyzed2026-08-19
1.1.3not analyzed2026-07-03
1.1.1not analyzed2026-05-13
1.1.0not analyzed2026-03-07
1.2.2highnone

Raw data

capture
513 KB
records
81,202
bytes per record
6.3

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-17 · run 5412f904-3571-45c2-8e17-78061adb881b

analysis 0.1.0 · 2026-10-16 · e987d53 · graph v2