Skip to content
Open-Source Registry

cargo / yaml-sigil-core

yaml-sigil-core 0.6.1-rc.1

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 2 detections
processes
382
operations
37K
packages
162
compiler runs
192
connections
3
job time
1m 42s
capture
470 KB
records
67K
bytes / record
7.1

Parsing, encoding, and shared document support for YAML Sigil

Build behaviourhas a build scriptundeclared fetchfetched outside crates.iocompiled C/C++

1,154 downloads · Apache-2.0 · source · cargo digital-signaturein-totoparserprotobufyaml

Artifact

file · retained · product · graph v2
1
ChecksDetections
Build behavior
▲ Network activity—
✓ Sensitive data access and transfer—
✓ Cross-process access—
✓ Build file changes—
▲ Build script activity—
✓ Data flow analysis—
✓ Filesystem writes—
✓ Context collection—
Supply chain
✓ Known vulnerabilities—
✓ Build-time dependency advisories—
✓ Dependency advisories—
✓ Declared and observed dependencies—
✓ Dependency and toolchain versions—
Pipeline
✓ Pipeline coverage—

Detections

2
  • Build script sent workspace data to a network destination
    buf-tools 1.73.0 › github.com:443
    The script read 1 workspace file outside its crate and allowed build directories.
    critical
  • Build code opened a network connection
    buf-tools 1.73.0 › github.com:443, release-assets.githubusercontent.com:443
    connection to github.com:443, opened by build_script_build-4f9640813fc17c1b
    high

Detection

critical

Build script sent workspace data to a network destination

subject buf-tools 1.73.0 · destination github.com:443

The script read 1 workspace file outside its crate and allowed build directories.

read: /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/Cargo.toml

build script: /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-4f9640813fc17c1b/build_script_build-4f9640813fc17c1b — readers: build_script_build-4f9640813fc17c1b

witnessed · yaml-sigil-rs · rule buildscript

Detection

high

Build code opened a network connection

subject buf-tools 1.73.0 · destination github.com:443, release-assets.githubusercontent.com:443

connection to github.com:443, opened by build_script_build-4f9640813fc17c1b

connection to release-assets.githubusercontent.com:443, opened by build_script_build-4f9640813fc17c1b

the opener is the build script at /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-4f9640813fc17c1b/build_script_build-4f9640813fc17c1b

  1. rustup2458
  2. cargo2458
  3. build_script_build-4f9640813fc17c1b3601at 17:34:24

witnessed · yaml-sigil-rs · rule egress

Network

2 fetches
  • github.com
    build code of buf-tools · build_script_build-4f9640813fc17c1b · 6 files
    undeclared
  • release-assets.githubusercontent.com
    build code of buf-tools · build_script_build-4f9640813fc17c1b · 6 files
    undeclared
cargo fetched 9,707 files from static.crates.io

Raw data

capture
470 KB
records
66,603
bytes per record
7.1

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

169 packages, 26 with a build script that ran, 11 doing more than compiling
PackageVersionUsageBuild behaviour
buf-tools direct1.73.0observedbuild scriptnetwork github.com, release-assets.githubusercontent.com
ring0.17.14observedbuild scriptprebuilt objects
windows_aarch64_gnullvm0.52.6observedbuild script, not runprebuilt objects
windows_aarch64_msvc0.52.6observedbuild script, not runprebuilt objects
windows_i686_gnu0.52.6observedbuild script, not runprebuilt objects
windows_i686_gnullvm0.52.6observedbuild script, not runprebuilt objects
windows_i686_msvc0.52.6observedbuild script, not runprebuilt objects
windows_x86_64_gnu0.52.6observedbuild script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6observedbuild script, not runprebuilt objects
windows_x86_64_msvc0.52.6observedbuild script, not runprebuilt objects
wit-bindgen0.57.1observedbuild script, not runprebuilt objects
ahash0.8.12observedbuild script
crc32fast1.5.2observedbuild script
getrandom0.3.4observedbuild script
getrandom0.4.3observedbuild script
httparse1.10.1observedbuild script
ld-linux-x86-64.so.2linkedsystem library
libc0.2.190observedbuild script
libc.so.6linkedsystem library
libgcc_s.so.1linkedsystem library
libm0.2.16observedbuild script
libm.so.6linkedsystem library
libmvec.so.1linkedsystem library
noyalib direct0.0.57observedbuild script
num-traits0.2.19observedbuild script
parking_lot_core0.9.12observedbuild script
prettyplease0.2.37observedbuild script
proc-macro21.0.107observedbuild script
quote1.0.47observedbuild script
ref-cast1.0.27observedbuild script
ref-cast-impl1.0.27observedproc macro
rustix1.1.5observedbuild script
rustls0.23.45observedbuild script
rustversion1.0.23observedbuild scriptproc macro
serde direct1.0.229observedbuild script
serde_core1.0.229observedbuild script
serde_derive1.0.229observedproc macro
serde_json1.0.154observedbuild script
strum_macros0.28.0observedproc macro
thiserror direct2.0.21observedbuild script
thiserror-impl2.0.21observedproc macro
tracing-attributes0.1.31observedproc macro
unicode-general-category1.1.0observedbuild script
wasm-bindgen0.2.129observedbuild script, not run
wasm-bindgen-macro0.2.129observedproc macro
wasm-bindgen-shared0.2.129observedbuild script, not run
zerocopy0.8.62observedbuild script
zerocopy-derive0.8.62observedproc macro
zmij1.0.23observedbuild script
adler22.0.1observed
aho-corasick1.1.5observed
allocator-api20.2.21observed
autocfg1.5.1observed
base64 direct0.23.1observed
bit-set0.8.0observed
bit-vec0.8.0observed
bitflags2.13.2observed
block-buffer0.12.1observed
borrow-or-share0.2.4observed
buffa direct0.9.2observed
buffa-build direct0.9.2observed
buffa-codegen0.9.2observed
buffa-descriptor0.9.2observed
bumpalo3.20.3observed
bytecount0.6.9observed
bytes1.12.1observed
cc1.8.0observed
cfg-if1.0.5observed
const-oid0.10.2observed
cpufeatures0.3.1observed
crypto-common0.2.2observed
data-encoding2.11.1observed
digest0.11.3observed
email_address0.2.9observed
equivalent1.0.2observed
errno0.3.14observed
fancy-regex0.19.2observed
fastrand2.5.0observed
filetime0.2.29observed
find-msvc-tools0.1.14observed
flate21.1.10observed
fluent-uri0.4.1observed
foldhash0.1.5observed
foldhash0.2.0observed
fraction0.17.0observed
getrandom0.2.17observed
hashbrown0.15.5observed
hashbrown0.17.1observed
heck0.5.0observed
hex0.4.3observed
http1.5.0observed
hybrid-array0.4.15observed
indexmap2.14.2observed
itoa1.0.18observed
js-sys0.3.106observed
jsonschema0.56.0observed
jsonschema-regex0.56.0observed
jsonschema-value0.56.0observed
linux-raw-sys0.12.1observed
lock_api0.4.14observed
log0.4.34observed
memchr2.8.3observed
micromap0.3.0observed
minisign-verify0.2.5observed
miniz_oxide0.9.1observed
num0.4.3observed
num-bigint0.4.8observed
num-cmp0.1.0observed
num-complex0.4.6observed
num-integer0.1.47observed
num-iter0.1.46observed
num-rational0.4.2observed
once_cell1.21.4observed
outref0.5.2observed
parking_lot0.12.5observed
percent-encoding2.3.2observed
pin-project-lite0.2.17observed
r-efi5.3.0observed
r-efi6.0.0observed
redox_syscall0.5.18observed
referencing0.56.0observed
regex1.13.1observed
regex-automata0.4.18observed
regex-syntax0.8.11observed
rustc-hash2.1.3observed
rustls-pki-types1.15.1observed
rustls-webpki0.103.15observed
scopeguard1.2.0observed
semver1.0.28observed
serde_spanned1.1.2observed
sha20.11.0observed
shlex2.0.1observed
simd-adler320.3.10observed
simdutf80.1.5observed
smallvec1.16.3observed
smoothutf80.2.3observed
strum0.28.0observed
subtle2.6.1observed
syn2.0.119observed
syn3.0.9observed
tar0.4.46observed
tempfile3.27.0observed
toml1.1.8+spec-1.1.0observed
toml_datetime1.1.2+spec-1.1.0observed
toml_parser1.1.5+spec-1.1.0observed
tracing direct0.1.44observed
tracing-core0.1.36observed
typenum1.20.1observed
unicode-ident1.0.27observed
untrusted0.9.0observed
ureq3.4.2observed
ureq-proto0.6.4observed
utf8-zero0.8.1observed
uuid-simd0.8.0observed
version_check0.9.5observed
vsimd0.8.0observed
wasi0.11.1+wasi-snapshot-preview1observed
wasip21.0.4+wasi-0.2.12observed
wasm-bindgen-macro-support0.2.129observed
webpki-roots1.0.9observed
windows-link0.2.1observed
windows-sys0.52.0observed
windows-sys0.61.2observed
windows-targets0.52.6observed
winnow1.0.4observed
xattr1.6.1observed
yaml-sigil-traits direct0.4.1observed
zeroize1.9.1observed
zlib-rs0.6.8observed

1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run 20be68db-8985-44b1-baae-1d39cba5b853

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2