Skip to content
Open-Source Registry

cargo / sqlx_query / 0.3.0

sqlx_query 0.3.0

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
727
operations
50K
packages
168
compiler runs
21
connections
1
job time
2m 11s
capture
542 KB
records
86K
bytes / record
6.3

Build behaviourread credentialscompiled C/C++

run bd6746dc-dfd4-4d3d-9a2d-cae2040847de · built 2026-10-14 · complete

Artifact

file · retained · product · graph v2
1

Checks

12 of 14 clear Sensitive data access and transfer Build-time dependency advisories
Build behavior✓▲✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Credential store read by build-time code
    build_script_directives_test-db0ff531527fbd40
    high

Detection

highwitnessed

Credential store read by build-time code

Subject
build_script_directives_test-db0ff531527fbd40
Jobs
build-test, build-test, build-test
Rule
credential-read

Evidence

  1. Credential store read by build-time codecause

    Credential store read by build-time code that does not own it: /tmp/.tmp3rATlb/.env

    source /tmp/.tmp3rATlb/.env

    by /home/runner/work/wTools/wTools/target/release/deps/build_script_directives_test-db0ff531527fbd40

Processes

build-test

cargo›cargo›build_script_directives_test-db0ff531527fbd40

Ran
/home/runner/work/wTools/wTools/target/release/deps/build_script_directives_test-db0ff531527fbd40
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2768
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2768
  3. build_script_directives_test-db0ff531527fbd40/home/runner/work/wTools/wTools/target/release/deps/build_script_directives_test-db0ff531527fbd406102

build-test

cargo›cargo›build_script_directives_test-db0ff531527fbd40

Ran
/home/runner/work/wTools/wTools/target/release/deps/build_script_directives_test-db0ff531527fbd40
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2768
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2768
  3. build_script_directives_test-db0ff531527fbd40/home/runner/work/wTools/wTools/target/release/deps/build_script_directives_test-db0ff531527fbd406102

build-test

cargo›cargo›build_script_directives_test-db0ff531527fbd40

Ran
/home/runner/work/wTools/wTools/target/release/deps/build_script_directives_test-db0ff531527fbd40
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 3 processes
  1. cargocargo test --release --locked --no-fail-fast2768
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast2768
  3. build_script_directives_test-db0ff531527fbd40/home/runner/work/wTools/wTools/target/release/deps/build_script_directives_test-db0ff531527fbd406102

Remediation

Build-time code has no business reading a credential store it does not own. Review the build script or compiler plugin that read it, and rotate the credential if the read is not explained.

Network

1 peers
  • static.crates.io:8080 the package manager · cargo (wTools) via crates.io · 9,152 files · went into an output ecosystem
Dependencies177Build behaviour
allocator-api20.2.21
atoi2.0.0
autocfg1.5.1
base640.22.1
bitflags2.13.1
block-buffer0.10.4
block-buffer0.12.1
byteorder1.5.0
bytes1.12.1
cc1.4.4
cfg-if1.0.4
chacha200.10.2
cmov0.5.4
cpufeatures0.2.17
cpufeatures0.3.1
crc3.4.0
crc-catalog2.5.0
crossbeam-queue0.3.14
crossbeam-utils0.8.22build script
crypto-common0.1.6
crypto-common0.2.2
ctutils0.4.3
digest0.10.7
digest0.11.3
displaydoc0.2.7proc macro
dotenvy0.15.7
either1.18.0
equivalent1.0.2
errno0.3.14
etcetera0.11.0
event-listener5.4.2
fastrand2.5.0
find-msvc-tools0.1.11
flume0.12.0
foldhash0.2.0
form_urlencoded1.2.2
futures-channel0.3.34
futures-core0.3.34
futures-executor0.3.34
futures-intrusive0.5.0
futures-io0.3.34
futures-sink0.3.34
futures-task0.3.34
futures-util0.3.34
generic-array0.14.9build script
getrandom0.2.17
getrandom0.4.3build script
hashbrown0.16.1
hashbrown0.17.1
hashlink0.11.1
heck0.5.0
hex0.4.3
hkdf0.13.0
hmac0.13.0
hybrid-array0.4.15
icu_collections2.3.0
icu_locale_core2.3.0
icu_normalizer2.3.0
icu_normalizer_data2.3.0build script
icu_properties2.3.0
icu_properties_data2.3.0build script
icu_provider2.3.1
idna1.1.0
idna_adapter1.2.2
indexmap2.14.1
itoa1.0.18
ld-linux-x86-64.so.2system library
libc0.2.189build script
libc.so.6system library
libgcc_s.so.1system library
libm.so.6system library
libmvec.so.1system library
libsqlite3-sys0.37.0build script
linux-raw-sys0.12.1
litemap0.8.3
lock_api0.4.14
log0.4.34
md-50.11.0
memchr2.8.3
mio1.2.2
num-traits0.2.19build script
once_cell1.21.4
parking2.2.1
parking_lot0.12.5
parking_lot_core0.9.12build script
percent-encoding2.3.2
pin-project-lite0.2.17
pkg-config0.3.34
potential_utf0.1.6
proc-macro21.0.107build script
quote1.0.47build script
r-efi6.0.0
rand0.10.2
rand_core0.10.1
redox_syscall0.5.18
ring0.17.14build scriptprebuilt objects
rustix1.1.4build script
rustls0.23.43build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
scopeguard1.2.0
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
sha10.11.0
sha20.10.9
sha20.11.0
shlex2.0.1
slab0.4.12
smallvec1.15.2
socket20.6.5
spin0.9.9
sqlx0.9.0
sqlx-core0.9.0
sqlx-macros0.9.0proc macro
sqlx-macros-core0.9.0
sqlx-mysql0.9.0
sqlx-postgres0.9.0
sqlx-sqlite0.9.0
stable_deref_trait1.2.1
stringprep0.1.5
subtle2.6.1
syn2.0.119
syn3.0.4
synstructure0.13.2
tempfile3.27.0
thiserror2.0.20build script
thiserror-impl2.0.20proc macro
tinystr0.8.4
tinyvec1.13.3
tokio1.53.1
tokio-macros2.7.2proc macro
tokio-stream0.1.19
toml_datetime1.1.1+spec-1.1.0
toml_edit0.25.13+spec-1.1.0
toml_parser1.1.3+spec-1.1.0
toml_writer1.1.2+spec-1.1.0
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
typenum1.20.1
unicode-bidi0.3.18
unicode-ident1.0.24
unicode-normalization0.1.25
unicode-properties0.1.4
untrusted0.9.0
url2.5.8
utf8_iter1.0.4
vcpkg0.2.15prebuilt objects
version_check0.9.5
wasi0.11.1+wasi-snapshot-preview1
webpki-roots1.0.9
whoami2.1.3
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow1.0.4
writeable0.6.4
yoke0.8.3
yoke-derive0.8.2proc macro
zerofrom0.1.8
zerofrom-derive0.1.7proc macro
zeroize1.9.0
zerotrie0.2.5
zerovec0.11.8
zerovec-derive0.11.6proc macro
zmij1.0.23build script

Raw data

capture
542 KB
records
85,588
bytes per record
6.3

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-14 · run bd6746dc-dfd4-4d3d-9a2d-cae2040847de

analysis 0.1.0 · 2026-10-14 · afb437c · graph v2