Skip to content
Open-Source Registry

cargo / trusty-memory / 0.29.0

trusty-memory 0.29.0

bitbison: flagged, behavior flagged, dependencies flagged, posture not checked, pipeline clean, 1 of 1 jobs captured RiskhighVulnshigh
processes
614
operations
475K
packages
490
compiler runs
5,020
connections
3
job time
13m 28s

Build behaviournot recorded for this run

run dec3c7b7-b837-481e-a56c-ae5485b0c3f1 · built 2026-10-06 · complete View on crates.io

Artifact

binary · retained · product · graph v1
3

Checks

8 of 13 clear Network activity Object file origins +3 more
Build behavior▲✓✓✓▲✓✓
Supply chain▲▲▲✓
Pipeline✓✓

Detections

2
  • Build code opened a network connection
    ort-sys 2.0.0-rc.12 › cdn.pyke.io:443
    high
  • Could not verify how this object file was built
    libonnxruntime.a
    high

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
ort-sys 2.0.0-rc.12
Destination
cdn.pyke.io:443
Reaches
Jobs
build-test
Rule
egress

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to cdn.pyke.io:443, opened by build-script-main

    subject cdn.pyke.io:443

    by /home/runner/work/trusty-tools/trusty-tools/target/release/build/ort-sys-117ea26a04b8532b/build-script-main

  2. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/trusty-tools/trusty-tools/target/release/build/ort-sys-117ea26a04b8532b/build-script-main

Processes

build-test

cargo›cargo›build-script-main

Ran
/home/runner/work/trusty-tools/trusty-tools/target/release/build/ort-sys-117ea26a04b8532b/build-script-main
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2204
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2204
  3. build-script-main/home/runner/work/trusty-tools/trusty-tools/target/release/build/ort-sys-117ea26a04b8532b/build-script-main8742

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Detection

highwitnessed

Could not verify how this object file was built

Object file origin needs review

Subject
/home/runner/.cache/ort.pyke.io/dfbin/x86_64-unknown-linux-gnu/acc1cba79c337594ead1d88ca72516147aa60054c84217b53399a31caa5ba671/libonnxruntime.awritten by build-script-main
Reaches
Jobs
build-test
Rule
object-provenance

Evidence

  1. Written without a recorded source compilationcause

    Written by build-script-main without a recorded source compilation

    subject /home/runner/.cache/ort.pyke.io/dfbin/x86_64-unknown-linux-gnu/acc1cba79c337594ead1d88ca72516147aa60054c84217b53399a31caa5ba671/libonnxruntime.a

    by /home/runner/work/trusty-tools/trusty-tools/target/release/build/ort-sys-117ea26a04b8532b/build-script-main

  2. Asked for by the build's own declarationsupport

    ort-sys asked the linker for it: static onnxruntime (target/release/build/ort-sys-564703909507c53a/output)

    subject /home/runner/.cache/ort.pyke.io/dfbin/x86_64-unknown-linux-gnu/acc1cba79c337594ead1d88ca72516147aa60054c84217b53399a31caa5ba671/libonnxruntime.a

Processes

build-test

cargo›cargo›build-script-main

Ran
/home/runner/work/trusty-tools/trusty-tools/target/release/build/ort-sys-117ea26a04b8532b/build-script-main
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2204
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2204
  3. build-script-main/home/runner/work/trusty-tools/trusty-tools/target/release/build/ort-sys-117ea26a04b8532b/build-script-main8742

Remediation

Inspect the writer and input chain. Confirm the object comes from a reviewed build step or declared prebuilt dependency. If its origin cannot be verified, replace it and rebuild.

Network

2 peers
  • cdn.pyke.io:443 build-script-main · Cloudflare, Inc. flagged
  • static.crates.io:8080 cargo (trusty-tools) via crates.io allowed
Vulnerabilities8PackageFixSeverity
RUSTSEC-2026-0258h2 0.4.14>=0.4.16high
RUSTSEC-2026-0190anyhow 1.0.102>=1.0.103low
RUSTSEC-2025-0141bincode 1.3.3none publishedlow
RUSTSEC-2026-0183git2 0.20.4>=0.21.0low
RUSTSEC-2026-0184git2 0.20.4>=0.21.0low
RUSTSEC-2026-0253lru 0.16.4>=0.18.2low
RUSTSEC-2024-0436paste 1.0.15none publishedlow
RUSTSEC-2026-0205scc 2.4.0>=3.8.4low
Dependencies550Build behaviour
ahash0.8.12
aho-corasick1.1.4
allocator-api20.2.21
anndists0.1.5
anstream1.0.0
anstyle1.0.14
anstyle-parse1.0.0
anstyle-query1.1.5
anyhow1.0.102
async-trait0.1.89
atomic-waker1.1.2
base640.13.1
base640.22.1
base64ct1.8.3
bincode1.3.3
bitflags2.13.1
block-buffer0.10.4
bytemuck1.25.0
byteorder1.5.0
byteorder-lite0.1.0
bytes1.11.1
castaway0.2.4
cc1.2.62
cfg-if1.0.4
chrono0.4.44
clap4.6.1
clap_builder4.6.0
clap_derive4.6.1
clap_lex1.1.0
cobs0.3.0
colorchoice1.0.5
colored2.2.0
combine4.6.7
compact_str0.9.0
console0.16.3
convert_case0.10.0
cpu-time1.0.0
cpufeatures0.2.17
crc32fast1.5.0
crossbeam-deque0.8.6
crossbeam-epoch0.9.20
crossbeam-utils0.8.21
crossterm0.29.0
crypto-common0.1.7
darling0.20.11
darling0.23.0
darling_core0.20.11
darling_core0.23.0
darling_macro0.20.11
darling_macro0.23.0
dary_heap0.3.9
dashmap6.2.1
der0.8.2
deranged0.5.8
derive_builder0.20.2
derive_builder_core0.20.2
derive_builder_macro0.20.2
derive_more2.1.1
derive_more-impl2.1.1
digest0.10.7
dirs5.0.1
dirs6.0.0
dirs-sys0.4.1
dirs-sys0.5.0
displaydoc0.2.5
document-features0.2.12
dotenvy0.15.7
either1.16.0
encoding_rs0.8.35
enum-as-inner0.6.1
env_filter1.0.1
env_logger0.11.10
equivalent1.0.2
errno0.3.14
esaxx-rs0.1.10
fallible-iterator0.3.0
fallible-streaming-iterator0.1.9
fastembed5.13.4
fastrand2.4.1
fd-lock4.0.4
fdeflate0.3.7
find-msvc-tools0.1.9
fixedbitset0.5.7
flate21.1.9
fnv1.0.7
foldhash0.1.5
foldhash0.2.0
foreign-types0.3.2
foreign-types-shared0.1.1
form_urlencoded1.2.2
futures0.3.32
futures-channel0.3.32
futures-core0.3.32
futures-executor0.3.32
futures-io0.3.32
futures-macro0.3.32
futures-sink0.3.32
futures-task0.3.32
futures-util0.3.32
generic-array0.14.7
getrandom0.2.17
getrandom0.3.4
getrandom0.4.2
git20.20.4
h20.4.14
hash320.2.1
hashbrown0.14.5
hashbrown0.15.5
hashbrown0.16.1
hashbrown0.17.1
hashlink0.11.0
heapless0.7.17
heck0.5.0
hex0.4.3
hf-hub0.5.0
hmac-sha2561.1.14
hnsw_rs0.3.4
http1.4.0
http-body1.0.1
http-body-util0.1.3
httparse1.10.1
hyper1.9.0
hyper-rustls0.27.9
hyper-tls0.6.0
hyper-util0.1.20
iana-time-zone0.1.65
icu_collections2.2.0
icu_locale_core2.2.0
icu_normalizer2.2.0
icu_normalizer_data2.2.0
icu_properties2.2.0
icu_properties_data2.2.0
icu_provider2.2.0
ident_case1.0.1
idna1.1.0
idna_adapter1.2.2
image0.25.10
image-webp0.2.4
indexmap2.14.0
indicatif0.18.4
indoc2.0.7
instability0.3.12
ipnet2.12.0
is_terminal_polyfill1.70.2
itertools0.14.0
itoa1.0.18
jiff0.2.24
jobserver0.1.34
kasuari0.4.12
lazy_static1.5.0
ld-linux-x86-64.so.2
libc0.2.186
libc.so.6
libcrypto.so.3
libgcc_s.so.1
libgit2-sys0.18.4+1.9.3
libm.so.6
libmvec.so.1
libsqlite3-sys0.37.0
libssh2-sys0.3.1git
libssl.so.3
libz-sys1.1.28
line-clipping0.3.7
linux-raw-sys0.12.1
litemap0.8.2
litrs1.0.0
lock_api0.4.14
log0.4.29
lru0.16.4
lru0.18.4
lzma-rust20.15.7
macro_rules_attribute0.2.2
macro_rules_attribute-proc_macro0.2.2
matchers0.2.0
matrixmultiply0.3.10
memchr2.8.0
mime0.3.17
miniz_oxide0.8.9
mio1.2.0
mmap-rs0.7.0
monostate0.1.18
monostate-impl0.1.18
moxcms0.8.1
native-tls0.2.18
ndarray0.17.2
nix0.30.1
nom7.1.3
nu-ansi-term0.50.3
num-complex0.4.6
num-conv0.2.2
num-integer0.1.46
num-traits0.2.19
num_threads0.1.7
once_cell1.21.4
onig6.5.3
onig_sys69.9.3
openssl0.10.80
openssl-macros0.1.1
openssl-probe0.1.6
openssl-probe0.2.1
openssl-src300.6.0+3.6.2
openssl-sys0.9.116
option-ext0.2.0
ort2.0.0-rc.12
ort-sys2.0.0-rc.12cdn.pyke.io
parking_lot0.12.5
parking_lot_core0.9.12
paste1.0.15
pem-rfc74681.0.0
percent-encoding2.3.2
petgraph0.8.3
pin-project-lite0.2.17
pkg-config0.3.33
png0.18.1
portable-atomic1.13.1
postcard1.1.3
potential_utf0.1.5
powerfmt0.2.0
ppv-lite860.2.21
proc-macro21.0.106
pxfm0.1.29
quick-error2.0.1
quote1.0.45
rand0.9.4
rand_chacha0.9.0
rand_core0.9.5
ratatui0.30.2
ratatui-core0.1.2
ratatui-crossterm0.1.2
ratatui-macros0.7.2
ratatui-widgets0.3.2
rawpointer0.2.1
rayon1.12.0
rayon-cond0.4.0
rayon-core1.13.0
redb4.1.0
regex1.12.3
regex-automata0.4.14
regex-syntax0.8.10
reqwest0.12.28
ring0.17.14
rpassword7.5.4
rtoolbox0.0.5
rusqlite0.39.0
rustix1.1.4
rustls0.23.45
rustls-pki-types1.14.1
rustls-webpki0.103.15
rustversion1.0.22
ryu1.0.23
safetensors0.7.0
same-file1.0.6
scopeguard1.2.0
serde1.0.228
serde_core1.0.228
serde_derive1.0.228
serde_json1.0.150
serde_spanned0.6.9
serde_urlencoded0.7.1
serde_yaml0.9.34+deprecated
sha1_smol1.0.1
sha20.10.9
sharded-slab0.1.7
shlex1.3.0
signal-hook0.3.18
signal-hook-mio0.2.5
signal-hook-registry1.4.8
simd-adler320.3.9
slab0.4.12
smallvec1.15.1
socket20.6.3
socks0.3.4
spin0.9.9
spm_precompiled0.1.4
stable_deref_trait1.2.1
static_assertions1.1.0
strsim0.11.1
strum0.28.0
strum_macros0.28.0
subtle2.6.1
syn2.0.117
sync_wrapper1.0.2
synstructure0.13.2
sysctl0.6.0
sysinfo0.33.1
tempfile3.27.0
thiserror1.0.69
thiserror2.0.18
thiserror-impl1.0.69
thiserror-impl2.0.18
thread_local1.1.9
time0.3.47
time-core0.1.8
tinystr0.8.3
tinyvec1.11.0
tinyvec_macros0.1.1
tokenizers0.22.2
tokio1.52.3
tokio-macros2.7.0
tokio-native-tls0.3.1
tokio-rustls0.26.4
tokio-util0.7.18
toml0.8.23
toml_datetime0.6.11
toml_edit0.22.27
toml_write0.1.2
tower0.5.3
tower-http0.6.11
tower-layer0.3.3
tower-service0.3.3
tracing0.1.44
tracing-attributes0.1.31
tracing-core0.1.36
tracing-log0.2.0
tracing-subscriber0.3.23
trusty-common0.53.5
trusty-common0.54.0
trusty-mcp0.2.1
try-lock0.2.5
typenum1.20.0
unicode-ident1.0.24
unicode-normalization0.1.25
unicode-normalization-alignments0.1.12
unicode-segmentation1.13.2
unicode-truncate2.0.1
unicode-width0.2.0
unicode_categories0.1.1
unit-prefix0.5.2
unsafe-libyaml0.2.11
untrusted0.9.0
ureq3.3.0
ureq-proto0.6.0
url2.5.8
utf8-zero0.8.1
utf8_iter1.0.4
utf8parse0.2.2
uuid1.23.1
vcpkg0.2.15
walkdir2.5.0
want0.3.1
webpki-root-certs1.0.7
webpki-roots1.0.7
winnow0.7.15
writeable0.6.3
yoke0.8.2
yoke-derive0.8.2
zerocopy0.8.48
zerofrom0.1.8
zerofrom-derive0.1.7
zeroize1.8.2
zerotrie0.2.4
zerovec0.11.6
zerovec-derive0.11.3
zmij1.0.21
zune-core0.5.1
zune-jpeg0.5.15
adler22.0.1
critical-section1.2.0
fslock0.2.1
is-docker0.2.0
is-wsl0.4.0
minimal-lexical0.2.1
num_cpus1.17.0
open5.3.5
pathdiff0.2.3
scc2.4.0
sdd3.0.10
serial_test3.4.0
serial_test_derive3.4.0
tokio-stream0.1.18
android_system_properties0.1.5
anstyle-wincon3.0.11
approx0.5.1
atomic0.6.1
atomic-polyfill1.0.3
autocfg1.5.0
bit-set0.5.3
bit-vec0.6.3
bitflags1.3.2
bumpalo3.20.2
by_address1.2.1
cfg_aliases0.2.1
chacha200.10.2
cookie0.18.1
cookie_store0.22.1
core-foundation0.10.1
core-foundation0.9.4
core-foundation-sys0.8.7
cpufeatures0.3.0
crossterm_winapi0.9.1
csscolorparser0.6.2
deltae0.3.2
embedded-io0.4.0
embedded-io0.6.1
encode_unicode1.0.0
euclid0.22.14
fancy-regex0.11.0
fast-srgb81.0.0
filedescriptor0.8.3
finl_unicode1.4.0
fixedbitset0.4.2
hermit-abi0.5.2
iana-time-zone-haiku0.1.2
id-arena2.3.0
jiff-static0.2.24
js-sys0.3.98
lab0.11.0
leb128fmt0.1.0
libm0.2.16
libredox0.1.16
lru-slab0.1.2
mac_address1.1.8
mach20.4.3
memmem0.1.1
memoffset0.9.1
nix0.29.0
ntapi0.4.3
num-derive0.4.2
once_cell_polyfill1.70.2
ordered-float4.6.0
palette0.7.6
palette_derive0.7.6
pest2.8.6
pest_derive2.8.6
pest_generator2.8.6
pest_meta2.8.6
phf0.11.3
phf_codegen0.11.3
phf_generator0.11.3
phf_macros0.11.3
phf_shared0.11.3
portable-atomic-util0.2.7
prettyplease0.2.37
quinn0.11.9
quinn-proto0.11.16
quinn-udp0.5.14
r-efi5.3.0
r-efi6.0.0
rand0.10.2
rand0.8.6
rand_core0.10.1
rand_core0.6.4
rand_pcg0.10.2
ratatui-termina0.1.0
ratatui-termwiz0.1.2
redox_syscall0.5.18
redox_users0.4.6
redox_users0.5.2
rsqlite-vfs0.1.1
rustc-hash2.1.2
rustc_version0.4.1
schannel0.1.29
security-framework3.7.0
security-framework-sys2.17.0
semver1.0.28
siphasher1.0.3
sqlite-wasm-rs0.5.4
syn1.0.109
system-configuration0.7.0
system-configuration-sys0.6.0
termina0.3.3
terminfo0.9.0
termios0.3.3
termwiz0.23.3
time-macros0.2.27
ucd-trie0.1.7
unicode-xid0.2.6
valuable0.1.1
version_check0.9.5
vtparse0.6.2
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.3+wasi-0.2.9
wasip30.4.0+wasi-0.3.0-rc-2026-01-06
wasm-bindgen0.2.121
wasm-bindgen-futures0.4.71
wasm-bindgen-macro0.2.121
wasm-bindgen-macro-support0.2.121
wasm-bindgen-shared0.2.121
wasm-encoder0.244.0
wasm-metadata0.244.0
wasm-streams0.4.2
wasmparser0.244.0
web-sys0.3.98
web-time1.1.0
wezterm-bidi0.2.3
wezterm-blob-leases0.1.1
wezterm-color-types0.3.0
wezterm-dynamic0.2.1
wezterm-dynamic-derive0.1.1
wezterm-input-types0.1.0
widestring1.2.1
winapi0.3.9
winapi-i686-pc-windows-gnu0.4.0
winapi-util0.1.11
winapi-x86_64-pc-windows-gnu0.4.0
windows0.48.0
windows0.57.0
windows-core0.57.0
windows-core0.61.2
windows-implement0.57.0
windows-implement0.60.2
windows-interface0.57.0
windows-interface0.59.3
windows-link0.1.3
windows-link0.2.1
windows-registry0.6.1
windows-result0.1.2
windows-result0.3.4
windows-result0.4.1
windows-strings0.4.2
windows-strings0.5.1
windows-sys0.48.0
windows-sys0.52.0
windows-sys0.59.0
windows-sys0.60.2
windows-sys0.61.2
windows-targets0.48.5
windows-targets0.52.6
windows-targets0.53.5
windows_aarch64_gnullvm0.48.5
windows_aarch64_gnullvm0.52.6
windows_aarch64_gnullvm0.53.1
windows_aarch64_msvc0.48.5
windows_aarch64_msvc0.52.6
windows_aarch64_msvc0.53.1
windows_i686_gnu0.48.5
windows_i686_gnu0.52.6
windows_i686_gnu0.53.1
windows_i686_gnullvm0.52.6
windows_i686_gnullvm0.53.1
windows_i686_msvc0.48.5
windows_i686_msvc0.52.6
windows_i686_msvc0.53.1
windows_x86_64_gnu0.48.5
windows_x86_64_gnu0.52.6
windows_x86_64_gnu0.53.1
windows_x86_64_gnullvm0.48.5
windows_x86_64_gnullvm0.52.6
windows_x86_64_gnullvm0.53.1
windows_x86_64_msvc0.48.5
windows_x86_64_msvc0.52.6
windows_x86_64_msvc0.53.1
wit-bindgen0.51.0
wit-bindgen0.57.1
wit-bindgen-core0.51.0
wit-bindgen-rust0.51.0
wit-bindgen-rust-macro0.51.0
wit-component0.244.0
wit-parser0.244.0
zerocopy-derive0.8.48
Versions75RiskVulnsPublished
0.35.06d ago
0.33.07d ago
0.32.18d ago
0.32.08d ago
0.31.09d ago
0.30.0not analyzed9d ago
0.29.6not analyzed9d ago
0.29.5not analyzed10d ago
0.29.4not analyzed10d ago
0.29.311d ago
0.29.2not analyzed12d ago
0.29.1not analyzed12d ago
0.29.012d ago
0.28.2not analyzed2026-09-28
0.28.1not analyzed2026-09-27
0.28.0not analyzed2026-09-26
0.27.2not analyzed2026-09-26
0.27.1not analyzed2026-09-26
0.27.0not analyzed2026-09-25
0.26.2not analyzed2026-09-23
0.26.1not analyzed2026-09-19
0.25.6not analyzed2026-09-02
0.25.5not analyzed2026-08-31
0.25.3not analyzed2026-08-29
0.25.2not analyzed2026-08-28
0.25.0not analyzed2026-08-27
0.24.1not analyzed2026-08-25
0.24.0not analyzed2026-08-24
0.23.1not analyzed2026-08-15
0.23.0not analyzed2026-08-15
0.22.0not analyzed2026-08-11
0.21.2not analyzed2026-07-26
0.21.0not analyzed2026-07-23
0.19.2not analyzed2026-07-09
0.19.1not analyzed2026-07-09
0.19.0not analyzed2026-07-08
0.18.3not analyzed2026-07-07
0.18.1not analyzed2026-07-03
0.18.0not analyzed2026-06-27
0.17.0not analyzed2026-06-25
0.16.0not analyzed2026-06-23
0.15.5not analyzed2026-06-16
0.15.4not analyzed2026-06-14
0.15.3not analyzed2026-06-12
0.15.2not analyzed2026-06-10
0.15.1not analyzed2026-06-09
0.15.0not analyzed2026-06-03
0.14.0not analyzed2026-06-01
0.12.0not analyzed2026-06-01
0.11.1not analyzed2026-06-01
0.11.0not analyzed2026-05-31
0.10.0not analyzed2026-05-30
0.9.0not analyzed2026-05-29
0.8.1not analyzed2026-05-28
0.8.0not analyzed2026-05-27
0.7.0not analyzed2026-05-27
0.6.0not analyzed2026-05-27
0.5.1not analyzed2026-05-25
0.5.0not analyzed2026-05-25
0.3.0not analyzed2026-05-25
0.1.73not analyzed2026-05-22
0.1.60not analyzed2026-05-21
0.1.59not analyzed2026-05-21
0.1.58not analyzed2026-05-21
0.1.57not analyzed2026-05-21
0.1.56not analyzed2026-05-21
0.1.55not analyzed2026-05-21
0.1.54not analyzed2026-05-21
0.1.52not analyzed2026-05-20
0.1.51not analyzed2026-05-20
0.1.50not analyzed2026-05-20
0.1.49not analyzed2026-05-20
0.1.48not analyzed2026-05-19
0.1.47not analyzed2026-05-19
0.1.45not analyzed2026-05-15

Raw data

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-06 · run dec3c7b7-b837-481e-a56c-ae5485b0c3f1

analysis 0.1.0 · 2026-10-05 · 8db20f3 · graph v1