Skip to content
Open-Source Registry

cargo / sora_sdk / 2026.2.0-canary.7

sora_sdk 2026.2.0-canary.7

processes
740
operations
68K
packages
102
compiler runs
69
connections
4
job time
1m 52s
run 5fdb89b6-2233-4db5-b1a7-f520f9676742 · built 2026-10-06 · complete
bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured
5 detections

Build behaviournot recorded for this run

Artifact

file · retained · product
1
ChecksDetections
Build behavior
▲ Network activity—
✓ Cross-process access—
✓ Build file changes—
▲ Build script activity—
▲ Object file origins—
✓ Filesystem writes—
✓ Context collection—
Supply chain
○ Known vulnerabilities—
▲ Build-time dependency advisories—
○ Dependency advisories—
✓ Declared and observed dependencies—
Pipeline
✓ Dependency versions across jobs—
✓ Pipeline coverage—

Detections

5
  • Build code opened a network connection
    shiguredo_openh264 2026.2.0 › github.com:443
    connection to github.com:443, opened by git-remote-http
    high
  • Build code opened a network connection
    shiguredo_webrtc 0.154.1-canary.5 › github.com:443
    connection to github.com:443, opened by curl
    high
  • Could not verify how this object file was built
    libwebrtc_c.a
    Written by build_script_build-7a1ca5c3ff8a97b5 from a pipe without a recorded source compilation
    high
  • Build script ran git
    shiguredo_openh264 2026.2.0 › github.com:443, 127.0.0.1:53
    Tool invocations: 8. Build script: /home/runner/work/sora-rust-sdk/sora-rust-sdk/target/release/build/shiguredo_openh264-98ddce744b672af0/build_script_build-98ddce744b672af0
    medium
  • Build script ran curl
    shiguredo_webrtc 0.154.1-canary.5 › github.com:443, release-assets.githubusercontent.com:443, 127.0.0.1:53
    Tool invocations: 1. Build script: /home/runner/work/sora-rust-sdk/sora-rust-sdk/target/release/build/shiguredo_webrtc-7a1ca5c3ff8a97b5/build_script_build-7a1ca5c3ff8a97b5
    medium

Detection

high

Build code opened a network connection

subject shiguredo_openh264 2026.2.0 · destination github.com:443

connection to github.com:443, opened by git-remote-http

the opener descends from the build script at /home/runner/work/sora-rust-sdk/sora-rust-sdk/target/release/build/shiguredo_openh264-98ddce744b672af0/build_script_build-98ddce744b672af0

  1. rustup2232
  2. cargo2232
  3. build_script_build-98ddce744b672af03332
  4. git3341
  5. git3334
  6. git-remote-http3336at 08:16:09

witnessed · rule egress

Detection

high

Build code opened a network connection

subject shiguredo_webrtc 0.154.1-canary.5 · destination github.com:443

connection to github.com:443, opened by curl

the opener descends from the build script at /home/runner/work/sora-rust-sdk/sora-rust-sdk/target/release/build/shiguredo_webrtc-7a1ca5c3ff8a97b5/build_script_build-7a1ca5c3ff8a97b5

  1. rustup2232
  2. cargo2232
  3. build_script_build-7a1ca5c3ff8a97b53304
  4. curl3310at 08:16:07

witnessed · rule egress

Detection

high

Could not verify how this object file was built

subject /home/runner/work/sora-rust-sdk/sora-rust-sdk/target/release/build/shiguredo_webrtc-9d03f86e07847132/out/lib/libwebrtc_c.a

Written by build_script_build-7a1ca5c3ff8a97b5 from a pipe without a recorded source compilation

shiguredo_webrtc asked the linker for it: static webrtc_c (target/release/build/shiguredo_webrtc-9d03f86e07847132/output)

  1. rustup2232
  2. cargo2232
  3. build_script_build-7a1ca5c3ff8a97b53304at 08:16:10

witnessed · sora-rust-sdk · rule object-provenance

Detection

medium

Build script ran git

subject shiguredo_openh264 2026.2.0 · destination github.com:443, 127.0.0.1:53

Tool invocations: 8. Build script: /home/runner/work/sora-rust-sdk/sora-rust-sdk/target/release/build/shiguredo_openh264-98ddce744b672af0/build_script_build-98ddce744b672af0

Command: git clone --depth 1 --quiet --branch v2.6.0 https://github.com/cisco/openh264

Command: /usr/lib/git-core/git rev-list --objects --stdin --not --all --quiet --alternate-refs

witnessed · sora-rust-sdk · rule buildscript

Detection

medium

Build script ran curl

subject shiguredo_webrtc 0.154.1-canary.5 · destination github.com:443, release-assets.githubusercontent.com:443, 127.0.0.1:53

Tool invocations: 1. Build script: /home/runner/work/sora-rust-sdk/sora-rust-sdk/target/release/build/shiguredo_webrtc-7a1ca5c3ff8a97b5/build_script_build-7a1ca5c3ff8a97b5

Command: curl -fSL --retry 3 -o /home/runner/work/sora-rust-sdk/sora-rust-sdk/target/release/build/shiguredo_webrtc-9d03f86e07847132/out/prebuilt.sha256 https://github.c…

Recorded activity: used a network connection to github.com:443

witnessed · sora-rust-sdk · rule buildscript

Network

3 peers
  • github.com:443 GitHub, Inc.
    curl; git-remote-http · build-test
    flagged
  • release-assets.githubusercontent.com:443 Fastly, Inc.
    curl · build-test
    flagged
  • static.crates.io:8080
    cargo (sora-rust-sdk) via crates.io · build-test
    allowed

Raw data

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

107 packages, 0 with a build script that ran, 0 doing more than compiling
PackageVersionUsageBuild behaviour
aho-corasick1.1.5observed
aws-lc-rs direct1.18.0observed
aws-lc-sys0.44.0observed
base64ct1.8.3observed
bindgen0.72.1observed
bitflags2.13.1observed
bytes1.12.1observed
cc1.4.4observed
cexpr0.6.0observed
cfg-if1.0.4observed
clang-sys1.9.1observed
cmake0.1.58observed
combine4.6.7observed
core-foundation0.10.1observed
core-foundation-sys0.8.7observed
dunce1.0.5observed
either1.18.0observed
find-msvc-tools0.1.11observed
fs_extra1.3.0observed
getrandom0.2.17observed
getrandom0.4.3observed
glob0.3.4observed
itertools0.13.0observed
jni0.22.4observed
jni-macros0.22.4observed
jni-sys0.4.1observed
jni-sys-macros0.4.1observed
jobserver0.1.35observed
ld-linux-x86-64.so.2linked
libc0.2.189observed
libc.so.6linked
libgcc_s.so.1linked
libloading0.8.9observed
libm.so.6linked
libmvec.so.1linked
log0.4.34observed
memchr2.8.3observed
minimal-lexical0.2.1observed
mio1.2.2observed
noflate direct0.1.1observed
nojson direct0.3.14observed
nom7.1.3observed
once_cell1.21.4observed
openssl-probe0.2.1observed
pin-project-lite0.2.17observed
pkg-config0.3.34observed
prettyplease0.2.37observed
proc-macro21.0.107observed
quote1.0.47observed
r-efi6.0.0observed
regex1.13.1observed
regex-automata0.4.18observed
regex-syntax0.8.11observed
ring0.17.14observed
rustc-hash2.1.3observed
rustc_version0.4.1observed
rustls direct0.23.43observed
rustls-native-certs0.8.4observed
rustls-pki-types1.15.1observed
rustls-platform-verifier direct0.7.0observed
rustls-platform-verifier-android0.1.1observed
rustls-webpki direct0.103.15observed
same-file1.0.6observed
schannel0.1.29observed
security-framework3.7.0observed
security-framework-sys2.17.0observed
semver1.0.28observed
shiguredo_cmake4.4.0observed
shiguredo_http11 direct2026.6.1observed
shiguredo_mp4 direct2026.5.0observed
shiguredo_openh264 direct2026.2.0observed github.com, git
shiguredo_toml2026.2.0observed
shiguredo_webrtc direct0.154.1-canary.5observed github.com, release-assets.githubusercontent.com, curl
shiguredo_websocket direct2026.3.0observed
shlex1.3.0observed
shlex2.0.1observed
simd_cesu81.2.0observed
simdutf80.1.5observed
socket20.6.5observed
subtle2.6.1observed
syn2.0.119observed
syn3.0.4observed
thiserror2.0.20observed
thiserror-impl2.0.20observed
tokio direct1.53.1observed
tokio-macros2.7.2observed
tokio-rustls direct0.26.4observed
unicode-ident1.0.24observed
untrusted0.7.1observed
untrusted0.9.0observed
walkdir2.5.0observed
wasi0.11.1+wasi-snapshot-preview1observed
webpki-root-certs1.0.9observed
winapi-util0.1.11observed
windows-link0.2.1observed
windows-sys0.52.0observed
windows-sys0.61.2observed
windows-targets0.52.6observed
windows_aarch64_gnullvm0.52.6observed
windows_aarch64_msvc0.52.6observed
windows_i686_gnu0.52.6observed
windows_i686_gnullvm0.52.6observed
windows_i686_msvc0.52.6observed
windows_x86_64_gnu0.52.6observed
windows_x86_64_gnullvm0.52.6observed
windows_x86_64_msvc0.52.6observed
zeroize1.9.0observed

1 of 1 jobs captured: build-test success · Generated 2026-10-06 · tarp 0.1.0+20261005230310-g8db20f3c46ff · run 5fdb89b6-2233-4db5-b1a7-f520f9676742