Skip to content
Open-Source Registry

cargo / truffle / 0.7.17

truffle 0.7.17

bitbison: flagged, behavior flagged, dependencies notes, posture not checked, pipeline clean, 1 of 1 jobs captured RiskmediumVulnsnone
processes
454
operations
39K
packages
208
compiler runs
119
connections
3
job time
1m 02s
capture
495 KB
records
69K
bytes / record
7.1

Build behaviourundeclared fetchfetched outside crates.iocompiled C/C++

run 9abfdee0-eb4e-41ee-9d91-385d8c6644d6 · built 2026-10-16 · complete View on crates.io

Graph

egress · medium · in libtruffle.rlib
2

Checks

12 of 14 clear Network activity Build-time dependency advisories
Build behavior▲✓✓✓✓✓✓✓
Supply chain✓▲✓✓✓
Pipeline✓

Detections

1
  • Build script reached github.com +1
    truffle-sidecar 0.7.17 › github.com:443, release-assets.githubusercontent.com:443
    medium

Detection

mediumwitnessed

Build script reached github.com +1

Unexpected network connection

Subject
truffle-sidecar 0.7.17
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build_script_build-5fd13db34b1c15fb

    subject github.com:443

    by /home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-5fd13db34b1c15fb/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build_script_build-5fd13db34b1c15fb

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-5fd13db34b1c15fb/build-script-build

  3. What a build script's fetch becamesupport

    1 file came down; nothing the build compiled, linked or ran

  4. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-5fd13db34b1c15fb/build_script_build-5fd13db34b1c15fb

In libtruffle.rlib

Loading the graph

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-5fd13db34b1c15fb/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2468
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2468
  3. build-script-build/home/runner/work/truffle/truffle/target/release/build/truffle-sidecar-5fd13db34b1c15fb/build-script-build4825

Remediation

The build script connected to the network while compiling. Nothing it downloaded was compiled, linked or run. Build the crate from what the registry ships, or accept the download after reviewing it.

Network

3 peers
  • github.com:443 build code of truffle-sidecar · build_script_build-5fd13db34b1c15fb · GitHub, Inc. · 1 file undeclared
  • release-assets.githubusercontent.com:443 build code of truffle-sidecar · build_script_build-5fd13db34b1c15fb · Fastly, Inc. · 1 file undeclared
  • static.crates.io:8080 the package manager · cargo (truffle) via crates.io · 10,602 files · went into an output ecosystem
Dependencies231Build behaviour
adler22.0.1
anyhow1.0.102build script, not run
arrayref0.3.9
arrayvec0.7.6
asn1-rs0.7.1
asn1-rs-derive0.6.0proc macro
asn1-rs-impl0.2.0proc macro
autocfg1.5.0
base640.22.1
bitflags2.11.0
blake31.8.4build script
block-buffer0.10.4
block-buffer0.12.0
bumpalo3.20.2
bytes1.11.1
cc1.2.56
cfg-if1.0.4
cfg_aliases0.2.1
chacha200.10.2
cmov0.5.3
combine4.6.7
const-oid0.10.2
constant_time_eq0.4.2
core-foundation0.10.1
core-foundation-sys0.8.7
cpufeatures0.2.17
cpufeatures0.3.0
crc32fast1.5.0build script
crypto-common0.1.7
crypto-common0.2.1
ctutils0.4.2
data-encoding2.10.0
der-parser10.0.0
deranged0.5.8
deunicode1.6.2
digest0.10.7
digest0.11.2
dirs6.0.0
dirs-sys0.5.0
displaydoc0.2.5proc macro
equivalent1.0.2
errno0.3.14
fastbloom0.17.0
find-msvc-tools0.1.9
flate21.1.9
foldhash0.1.5
foldhash0.2.0
futures-core0.3.32
futures-macro0.3.32proc macro
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
generic-array0.14.7build script
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.2build script
hashbrown0.15.5
hashbrown0.16.1
heck0.5.0
hex0.4.3
hmac0.13.0
hostname0.4.2
http1.4.0
httparse1.10.1build script
hybrid-array0.4.10
id-arena2.3.0
indexmap2.13.0
itoa1.0.17
jni0.22.4build script, not run
jni-macros0.22.4build script, not runproc macro
jni-sys0.4.1
jni-sys-macros0.4.1proc macro
js-sys0.3.91
lazy_static1.5.0
ld-linux-x86-64.so.2system library
leb128fmt0.1.0
libc0.2.186build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
libredox0.1.14
log0.4.29
lru-slab0.1.2
memchr2.8.0
minimal-lexical0.2.1
miniz_oxide0.8.9
mio1.1.1
nom7.1.3
num-bigint0.4.6
num-conv0.2.0
num-integer0.1.46
num-traits0.2.19build script, not run
oid-registry0.8.1build script, not run
once_cell1.21.3
openssl-probe0.2.1
option-ext0.2.0
pem3.0.6
percent-encoding2.3.2
pin-project-lite0.2.17
portable-atomic1.13.1build script
powerfmt0.2.0
ppv-lite860.2.21
prettyplease0.2.37build script, not run
proc-macro21.0.106build script
quinn0.11.9build script
quinn-proto0.11.19
quinn-udp0.5.14build script
quote1.0.45build script
r-efi5.3.0
r-efi6.0.0
rand0.10.3
rand0.9.2
rand_chacha0.9.0
rand_core0.10.1
rand_core0.9.5
rand_pcg0.10.2
rcgen0.14.7
redox_users0.5.2
ring0.17.14build scriptprebuilt objects
rustc-hash2.1.1
rustc_version0.4.1
rusticata-macros4.1.0
rustls0.23.46build script
rustls-native-certs0.8.3
rustls-pki-types1.14.0
rustls-platform-verifier0.7.1
rustls-platform-verifier-android0.2.0
rustls-webpki0.103.15
rustversion1.0.22build script, not runproc macro
same-file1.0.6
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.27
serde1.0.228build script
serde_core1.0.228build script
serde_derive1.0.228proc macro
serde_json1.0.149build script
sha10.10.6
sha20.11.0
shlex1.3.0
signal-hook-registry1.4.8
simd-adler320.3.8
simd_cesu81.2.0
simdutf80.1.5
siphasher1.0.2
slab0.4.12
socket20.6.3
subtle2.6.1
syn2.0.117
synstructure0.13.2
thiserror2.0.18build script
thiserror-impl2.0.18proc macro
time0.3.47
time-core0.1.8
time-macros0.2.27proc macro
tinyvec1.11.0
tinyvec_macros0.1.1
tokio1.50.0
tokio-macros2.6.1proc macro
tokio-tungstenite0.29.0
tokio-util0.7.18
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
truffle-core0.7.17build script
truffle-sidecar0.7.17build scriptnetworkgithub.com, release-assets.githubusercontent.com
tungstenite0.29.0
typenum1.19.0build script
ulid1.2.1
unicode-ident1.0.24
unicode-normalization0.1.25
unicode-xid0.2.6
untrusted0.9.0
ureq3.3.0
ureq-proto0.6.0
utf8-zero0.8.1
uuid1.22.0
version_check0.9.5
walkdir2.5.0
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.2+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasm-bindgen0.2.114build script, not run
wasm-bindgen-macro0.2.114proc macro
wasm-bindgen-macro-support0.2.114
wasm-bindgen-shared0.2.114build script, not run
wasm-encoder0.244.0
wasm-metadata0.244.0
wasmparser0.244.0
web-time1.1.0
webpki-root-certs1.0.6
webpki-roots1.0.6
winapi-util0.1.11
windows-link0.2.1
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_gnullvm0.53.1build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.53.1build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnu0.53.1build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.53.1build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_i686_msvc0.53.1build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.53.1build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.53.1build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.53.1build script, not runprebuilt objects
wit-bindgen0.51.0build script, not runprebuilt objects
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0build script, not run
wit-bindgen-rust-macro0.51.0build script, not runproc macro
wit-component0.244.0
wit-parser0.244.0
x509-parser0.18.1
yasna0.5.2
zerocopy0.8.40build script
zerocopy-derive0.8.40proc macro
zeroize1.8.2
zmij1.0.21build script
Versions41RiskVulnsPublished
0.7.171d ago
0.7.16did not build5d ago
0.7.155d ago
0.7.14not analyzed2026-09-16
0.7.13not analyzed2026-09-06
0.7.12not analyzed2026-08-03
0.7.11not analyzed2026-07-28
0.7.9not analyzed2026-07-28
0.7.8not analyzed2026-07-27
0.7.7not analyzed2026-07-26
0.7.6not analyzed2026-07-24
0.7.5not analyzed2026-07-24
0.7.3not analyzed2026-07-16
0.7.2not analyzed2026-07-16
0.7.1not analyzed2026-07-13
0.7.0not analyzed2026-07-11
0.6.0not analyzed2026-07-10
0.5.1not analyzed2026-07-09
0.4.9not analyzed2026-07-08
0.4.8not analyzed2026-07-07
0.4.7not analyzed2026-07-03
0.4.6not analyzed2026-04-22
0.4.5not analyzed2026-04-14
0.4.4not analyzed2026-04-14
0.4.3not analyzed2026-04-12
0.4.2not analyzed2026-04-12
0.4.1not analyzed2026-04-11
0.4.0not analyzed2026-04-11
0.3.25not analyzed2026-04-10
0.3.24not analyzed2026-04-10
0.3.23not analyzed2026-04-10
0.3.22not analyzed2026-04-10
0.3.21not analyzed2026-04-10
0.3.20not analyzed2026-04-10
0.3.19not analyzed2026-04-10
0.3.18not analyzed2026-04-10
0.3.17not analyzed2026-03-31
0.3.16not analyzed2026-03-31
0.3.12not analyzed2026-03-30
0.3.2not analyzed2026-03-29
0.7.19mediumnone

Raw data

capture
495 KB
records
69,475
bytes per record
7.1

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-16 · run 9abfdee0-eb4e-41ee-9d91-385d8c6644d6

analysis 0.1.0 · 2026-10-15 · 244c7b2 · graph v2