Skip to content
Open-Source Registry

cargo / yaml-sigil-core / 0.6.1

yaml-sigil-core 0.6.1

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured 2 detections
processes
551
operations
37K
packages
162
compiler runs
192
connections
3
job time
1m 25s
capture
461 KB
records
65K
bytes / record
7.0

Build behaviourhas a build scriptundeclared fetchfetched outside crates.iocompiled C/C++

run 5d29d383-ccb3-4285-84fb-f9af1b5399a5 · built 2026-10-13 · complete

Artifact

file · retained · product · graph v2
1

Checks

12 of 14 clear Network activity Build script activity
Build behavior▲✓✓✓▲✓✓✓
Supply chain✓✓✓✓✓
Pipeline✓

Detections

2
  • Build script sent workspace data to a network destination
    buf-tools 1.73.0 › github.com:443
    critical
  • Build code opened a network connection
    buf-tools 1.73.0 › github.com:443, release-assets.githubusercontent.com:443
    high

Detection

criticalwitnessed

Build script sent workspace data to a network destination

Unexpected build script activity

Subject
buf-tools 1.73.0
Destination
github.com:443
Jobs
build-test
Rule
buildscript · yaml-sigil-rs

Evidence

  1. Build script read outside its cratecause

    The script read 1 workspace file outside its crate and allowed build directories.

    by /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-d9c340dfe0556563/build-script-build

  2. Build script data reached a network destinationcause

    A recorded data-flow chain connects the workspace files read by this script to github.com:443.

    target github.com:443

  3. File read by the build scriptsupport

    read: /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/Cargo.toml

    input /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/Cargo.toml

  4. Build scriptcontext

    build script: /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-d9c340dfe0556563/build_script_build-d9c340dfe0556563 — readers: build_script_build-d9c340dfe0556563

    subject build-script-build

Remediation

Review the listed files and the crate's build.rs. Remove unnecessary reads, or use a reviewed dependency version.

Detection

highwitnessed

Build code opened a network connection

Unexpected network connection

Subject
buf-tools 1.73.0
Destination
github.com:443, release-assets.githubusercontent.com:443
Reaches
Jobs
build-test
Rule
egress · yaml-sigil-rs

Evidence

  1. Connection outside the process’s allowed destinationscause

    connection to github.com:443, opened by build_script_build-d9c340dfe0556563

    subject github.com:443

    by /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-d9c340dfe0556563/build-script-build

  2. Connection outside the process’s allowed destinationscause

    connection to release-assets.githubusercontent.com:443, opened by build_script_build-d9c340dfe0556563

    subject release-assets.githubusercontent.com:443

    by /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-d9c340dfe0556563/build-script-build

  3. Connection opened by a build script or child processsupport

    the opener is the build script at /home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-d9c340dfe0556563/build_script_build-d9c340dfe0556563

Processes

build-test

cargo›cargo›build-script-build

Ran
/home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-d9c340dfe0556563/build-script-build
Invoked by
cargo build --release --locked --message-format=json-render-diagnostics
Lineage · 3 processes
  1. cargocargo build --release --locked --message-format=json-render-diagnostics2457
  2. cargo/home/runner/.rustup/toolchains/1.99.0-x86_64-unknown-linux-gnu/bin/cargo build --release --locked --message-format=json-render-diagnostics2457
  3. build-script-build/home/runner/work/yaml-sigil-rs/yaml-sigil-rs/target/release/build/buf-tools-d9c340dfe0556563/build-script-build3605

Remediation

Review the process and its owning build step. Remove unnecessary requests; move required downloads to a declared dependency-fetch step.

Network

3 peers
  • github.com:443 build code of buf-tools · build_script_build-d9c340dfe0556563 (yaml-sigil-rs) · GitHub, Inc. · 6 files undeclared
  • release-assets.githubusercontent.com:443 build code of buf-tools · build_script_build-d9c340dfe0556563 (yaml-sigil-rs) · Fastly, Inc. · 6 files undeclared
  • static.crates.io:8080 the package manager · cargo (yaml-sigil-rs) via crates.io · 9,705 files · went into an output ecosystem
Dependencies169Build behaviour
adler22.0.1
ahash0.8.12build script
aho-corasick1.1.5
allocator-api20.2.21
autocfg1.5.1
base640.23.1
bit-set0.8.0
bit-vec0.8.0
bitflags2.13.2
block-buffer0.12.1
borrow-or-share0.2.4
buf-tools1.73.0build scriptnetworkgithub.com, release-assets.githubusercontent.com
buffa0.9.2
buffa-build0.9.2
buffa-codegen0.9.2
buffa-descriptor0.9.2
bumpalo3.20.3
bytecount0.6.9
bytes1.12.1
cc1.8.0
cfg-if1.0.5
const-oid0.10.2
cpufeatures0.3.1
crc32fast1.5.2build script
crypto-common0.2.2
data-encoding2.11.1
digest0.11.3
email_address0.2.9
equivalent1.0.2
errno0.3.14
fancy-regex0.19.2
fastrand2.5.0
filetime0.2.29
find-msvc-tools0.1.14
flate21.1.10
fluent-uri0.4.1
foldhash0.1.5
foldhash0.2.0
fraction0.17.0
getrandom0.2.17
getrandom0.3.4build script
getrandom0.4.3build script
hashbrown0.15.5
hashbrown0.17.1
heck0.5.0
hex0.4.3
http1.5.0
httparse1.10.1build script
hybrid-array0.4.15
indexmap2.14.2
itoa1.0.18
js-sys0.3.106
jsonschema0.56.0
jsonschema-regex0.56.0
jsonschema-value0.56.0
ld-linux-x86-64.so.2system library
libc0.2.190build script
libc.so.6system library
libgcc_s.so.1system library
libm0.2.16build script
libm.so.6system library
libmvec.so.1system library
linux-raw-sys0.12.1
lock_api0.4.14
log0.4.34
memchr2.8.3
micromap0.3.0
minisign-verify0.2.5
miniz_oxide0.9.1
noyalib0.0.57build script
num0.4.3
num-bigint0.4.8
num-cmp0.1.0
num-complex0.4.6
num-integer0.1.47
num-iter0.1.46
num-rational0.4.2
num-traits0.2.19build script
once_cell1.21.4
outref0.5.2
parking_lot0.12.5
parking_lot_core0.9.12build script
percent-encoding2.3.2
pin-project-lite0.2.17
prettyplease0.2.37build script
proc-macro21.0.107build script
quote1.0.47build script
r-efi5.3.0
r-efi6.0.0
redox_syscall0.5.18
ref-cast1.0.27build script
ref-cast-impl1.0.27proc macro
referencing0.56.0
regex1.13.1
regex-automata0.4.18
regex-syntax0.8.11
ring0.17.14build scriptprebuilt objects
rustc-hash2.1.3
rustix1.1.5build script
rustls0.23.45build script
rustls-pki-types1.15.1
rustls-webpki0.103.15
rustversion1.0.23build scriptproc macro
scopeguard1.2.0
semver1.0.28
serde1.0.229build script
serde_core1.0.229build script
serde_derive1.0.229proc macro
serde_json1.0.154build script
serde_spanned1.1.2
sha20.11.1
shlex2.0.1
simd-adler320.3.10
simdutf80.1.5
smallvec1.16.3
smoothutf80.2.3
strum0.28.0
strum_macros0.28.0proc macro
subtle2.6.1
syn2.0.119
syn3.0.9
tar0.4.46
tempfile3.27.0
thiserror2.0.21build script
thiserror-impl2.0.21proc macro
toml1.1.8+spec-1.1.0
toml_datetime1.1.2+spec-1.1.0
toml_parser1.1.5+spec-1.1.0
tracing0.1.44
tracing-attributes0.1.31proc macro
tracing-core0.1.36
typenum1.20.1
unicode-general-category1.1.0build script
unicode-ident1.0.27
untrusted0.9.0
ureq3.4.2
ureq-proto0.6.4
utf8-zero0.8.1
uuid-simd0.8.0
version_check0.9.5
vsimd0.8.0
wasi0.11.1+wasi-snapshot-preview1
wasip21.0.4+wasi-0.2.12
wasm-bindgen0.2.129build script, not run
wasm-bindgen-macro0.2.129proc macro
wasm-bindgen-macro-support0.2.129
wasm-bindgen-shared0.2.129build script, not run
webpki-roots1.0.9
windows-link0.2.1
windows-sys0.52.0
windows-sys0.61.2
windows-targets0.52.6
windows_aarch64_gnullvm0.52.6build script, not runprebuilt objects
windows_aarch64_msvc0.52.6build script, not runprebuilt objects
windows_i686_gnu0.52.6build script, not runprebuilt objects
windows_i686_gnullvm0.52.6build script, not runprebuilt objects
windows_i686_msvc0.52.6build script, not runprebuilt objects
windows_x86_64_gnu0.52.6build script, not runprebuilt objects
windows_x86_64_gnullvm0.52.6build script, not runprebuilt objects
windows_x86_64_msvc0.52.6build script, not runprebuilt objects
winnow1.0.4
wit-bindgen0.57.1build script, not runprebuilt objects
xattr1.6.1
yaml-sigil-traits0.4.1
zerocopy0.8.62build script
zerocopy-derive0.8.62proc macro
zeroize1.9.1
zlib-rs0.6.8
zmij1.0.23build script

Raw data

capture
461 KB
records
65,416
bytes per record
7.0

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-test success · Generated 2026-10-13 · run 5d29d383-ccb3-4285-84fb-f9af1b5399a5

analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2