Skip to content
Open-Source Registry

cargo / srvm / 0.1.2

srvm 0.1.2

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 1 detection
processes
266
operations
119K
packages
181
compiler runs
434
connections
5
job time
2m 45s
capture
1.7 MB
records
226K
bytes / record
7.4

Build behaviourcompiled C/C++

run ffa8fadb-c948-49f0-b68c-e90966b4434b · built 2026-10-08 · complete

Artifact

binary · retained · product · graph v1
2

Checks

13 of 14 clear Data flow analysis
Build behavior✓✓✓✓✓▲✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

1
  • Could not verify how this object file was built
    python.o
    high

Detection

highwitnessed

Could not verify how this object file was built

Object file origin needs review

Subject
/home/runner/.cache/srvm/runtimes/python/3.14.8.6112.1791494403072673628.partial/python/lib/python3.14/config-3.14-x86_64-linux-gnu/python.owritten by srvm
Jobs
build-test
Rule
object-provenance

Evidence

  1. Written from a pipecause

    input pipe#86954: Written by python3.14 from a pipe without a recorded source compilation

    subject /home/runner/.cache/srvm/runtimes/python/3.14.8.6112.1791494403072673628.partial/python/lib/python3.14/config-3.14-x86_64-linux-gnu/python.osource pipe

    by /usr/bin/python3 -m venv .venv

Processes

build-test

cargo›cargo›bootstrap-668dcf48e50d41ba›srvm›python3

Ran
/usr/bin/python3 -m venv .venv
Invoked by
cargo test --release --locked --no-fail-fast
Lineage · 5 processes
  1. cargocargo test --release --locked --no-fail-fast5087
  2. cargo/home/runner/.rustup/toolchains/1.97.1-x86_64-unknown-linux-gnu/bin/cargo test --release --locked --no-fail-fast5087
  3. bootstrap-668dcf48e50d41ba/home/runner/work/srvm/srvm/target/release/deps/bootstrap-668dcf48e50d41ba6114
  4. srvm/home/runner/work/srvm/srvm/target/release/srvm --no-open --no-color --port 0 /tmp/.tmp4PKm4U6120
  5. python3/usr/bin/python3 -m venv .venv6119

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

5 peers
  • api.github.com:443 srvm's own build code · srvm · GitHub, Inc. unjudged
  • github.com:443 srvm's own build code · srvm · GitHub, Inc. unjudged
  • release-assets.githubusercontent.com:443 srvm's own build code · srvm · Fastly, Inc. unjudged
  • static.crates.io:8080 the package manager · cargo (srvm) via crates.io · 9,416 files · went into an output ecosystem
  • static.rust-lang.org:443 the toolchain installer · rustup (srvm) via Package registries profile (rustup → asn:54113) · Fastly, Inc. · 180 files · went into an output ecosystem
Dependencies209Build behaviour
aes0.8.4
aho-corasick1.1.5
ambient-authority0.0.2
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.104build script
base640.23.1
bitflags2.13.2
block-buffer0.10.4
bumpalo3.20.3
byteorder1.5.0
bytes1.12.1
bzip20.5.2
bzip2-sys0.1.13+1.0.8build script
cap-primitives4.0.3build script
cap-std4.0.3build script
cc1.6.0
cfg-if1.0.5
cipher0.4.4
clap4.6.7
clap_builder4.6.7
clap_derive4.6.7proc macro
clap_lex1.1.1
colorchoice1.0.5
constant_time_eq0.3.1
cpufeatures0.2.17
crc3.4.0
crc-catalog2.5.0
crc32fast1.5.2build script
crypto-common0.1.7
ctrlc3.5.2
deflate640.1.12
deranged0.5.8
digest0.10.7
dirs5.0.1
dirs-sys0.4.1
displaydoc0.2.7proc macro
equivalent1.0.2
filetime0.2.29
find-msvc-tools0.1.14
flate21.1.10
fs-set-times0.20.3
generic-array0.14.7build script
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
hashbrown0.17.1
heck0.5.0
hmac0.12.1
http1.5.0
httparse1.10.1build script
indexmap2.14.2
inout0.1.4
io-extras0.19.0build script
io-lifetimes2.0.4build script
io-lifetimes3.0.1build script
ipnet2.12.2
is_terminal_polyfill1.70.2
itoa1.0.18
jobserver0.1.35
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
liblzma.so.5system library
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
log0.4.34
lzma-rs0.3.0
lzma-sys0.1.20build script
maybe-owned0.3.4
memchr2.8.3
miniz_oxide0.9.1
nix0.31.3build script
num-conv0.2.2
once_cell1.21.4
option-ext0.2.0
pbkdf20.12.2
percent-encoding2.3.2
pkg-config0.3.34
powerfmt0.2.0
proc-macro21.0.107build script
quote1.0.47build script
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
ring0.17.14build scriptprebuilt objects
rustix1.1.5build script
rustix-linux-procfs0.1.1
rustls0.23.45build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.151build script
sha10.10.7
sha20.10.9
shlex2.0.1
simd-adler320.3.10
strsim0.11.1
subtle2.6.1
syn2.0.119
syn3.0.6
tar0.4.46
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
time0.3.55
time-core0.1.9
typenum1.20.1
unicode-ident1.0.26
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.4
utf8-zero0.8.1
utf8parse0.2.2
webpki-roots1.0.9
xattr1.6.1
xz20.1.7
zeroize1.9.0
zeroize_derive1.5.0proc macro
zip2.4.2build script
zmij1.0.23build script
zopfli0.8.3
zstd0.13.3
zstd-safe7.3.0build script
zstd-sys2.1.0+zstd.1.5.7build script
adler22.0.1
fastrand2.5.0
tempfile3.27.0
anstyle-wincon3.0.11
arbitrary1.4.2
assert_cmd2.2.2build script
autocfg1.5.1
block20.6.2
bstr1.13.1
cfg_aliases0.2.2
clap_complete4.6.11
clap_mangen0.2.33
crossbeam-utils0.8.23build script, not run
derive_arbitrary1.4.2proc macro
difflib0.4.0
dispatch20.3.1
errno0.3.14
float-cmp0.10.0
js-sys0.3.106
libredox0.1.25
normalize-line-endings0.3.0
num-traits0.2.19build script
objc20.6.4build script, not run
objc2-encode4.1.0
once_cell_polyfill1.70.2
predicates3.1.4
predicates-core1.0.10
predicates-tree1.0.13
r-efi5.3.0
r-efi6.0.0
redox_users0.4.6
roff1.1.1
rustversion1.0.23build script, not runproc macro
termtree0.5.1
thiserror1.0.69build script, not run
thiserror-impl1.0.69proc macro
version_check0.9.5
wait-timeout0.2.1
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
windows-link0.2.1
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.48.5build script, not runprebuilt objects
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.48.5build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.48.5build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.48.5build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.48.5build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.48.5build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.48.5build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
winx0.36.4
wit-bindgen0.57.1build script, not runprebuilt objects
zlib-rs0.6.8

Raw data

capture
1.7 MB
records
226,373
bytes per record
7.4

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-08 · run ffa8fadb-c948-49f0-b68c-e90966b4434b

analysis 0.1.0 · 2026-10-08 · c0b8b6b · graph v1