cargo / yaml-sigil-verification / 0.6.1-rc.1
Artifact
- libyaml_sigil_verification.rlibfile · retained · product 1
| Checks | Detections |
|---|---|
| Build behavior | |
| ▲ Network activity | — |
| ✓ Sensitive data access and transfer | — |
| ✓ Cross-process access | — |
| ✓ Build file changes | — |
| ▲ Build script activity | — |
| ✓ Data flow analysis | — |
| ✓ Filesystem writes | — |
| ✓ Context collection | — |
| Supply chain | |
| ✓ Known vulnerabilities | — |
| ✓ Build-time dependency advisories | — |
| ✓ Dependency advisories | — |
| ✓ Declared and observed dependencies | — |
| ✓ Dependency and toolchain versions | — |
| Pipeline | |
| ✓ Pipeline coverage | — |
Detections
2-
criticalBuild script sent workspace data to a network destinationThe script read 1 workspace file outside its crate and allowed build directories.
-
highBuild code opened a network connectionconnection to github.com:443, opened by build_script_build-1bc48410f6093c32
Network
2 fetches-
undeclaredgithub.com
-
undeclaredrelease-assets.githubusercontent.com
cargo fetched 12,972 files from static.crates.io
Dependencies
162 packages, 22 with a build script that ran, 11 doing more than compiling| Package | Version | Usage | Build behaviour | |
|---|---|---|---|---|
| aws-lc-sys | 0.45.0 | observed | build scriptprebuilt objects | |
| buf-tools | 1.73.0 | observed | build scriptnetwork github.com, release-assets.githubusercontent.com | |
| ring | 0.17.14 | observed | build scriptprebuilt objects | |
| windows_aarch64_gnullvm | 0.52.6 | observed | build script, not runprebuilt objects | |
| windows_aarch64_msvc | 0.52.6 | observed | build script, not runprebuilt objects | |
| windows_i686_gnu | 0.52.6 | observed | build script, not runprebuilt objects | |
| windows_i686_gnullvm | 0.52.6 | observed | build script, not runprebuilt objects | |
| windows_i686_msvc | 0.52.6 | observed | build script, not runprebuilt objects | |
| windows_x86_64_gnu | 0.52.6 | observed | build script, not runprebuilt objects | |
| windows_x86_64_gnullvm | 0.52.6 | observed | build script, not runprebuilt objects | |
| windows_x86_64_msvc | 0.52.6 | observed | build script, not runprebuilt objects | |
| aws-lc-rs | 1.18.1 | observed | build script | |
| crc32fast | 1.5.2 | observed | build script | |
| curve25519-dalek direct | 5.0.0 | observed | build script | |
| curve25519-dalek-derive | 0.1.1 | observed | proc macro | |
| getrandom | 0.4.3 | observed | build script | |
| httparse | 1.10.1 | observed | build script | |
| ld-linux-x86-64.so.2 | linked | system library | ||
| libc | 0.2.190 | observed | build script | |
| libc.so.6 | linked | system library | ||
| libgcc_s.so.1 | linked | system library | ||
| libm | 0.2.16 | observed | build script | |
| libm.so.6 | linked | system library | ||
| libmvec.so.1 | linked | system library | ||
| noyalib | 0.0.57 | observed | build script | |
| num-traits | 0.2.19 | observed | build script | |
| prettyplease | 0.2.37 | observed | build script | |
| proc-macro2 | 1.0.107 | observed | build script | |
| quote | 1.0.47 | observed | build script | |
| rustix | 1.1.5 | observed | build script | |
| rustls | 0.23.45 | observed | build script | |
| rustversion | 1.0.23 | observed | build scriptproc macro | |
| serde | 1.0.229 | observed | build script | |
| serde_core | 1.0.229 | observed | build script | |
| serde_derive | 1.0.229 | observed | proc macro | |
| serde_json | 1.0.154 | observed | build script, not run | |
| thiserror | 2.0.21 | observed | build script | |
| thiserror-impl | 2.0.21 | observed | proc macro | |
| tokio-macros | 2.7.2 | observed | proc macro | |
| tracing-attributes | 0.1.31 | observed | proc macro | |
| wasm-bindgen | 0.2.129 | observed | build script, not run | |
| wasm-bindgen-macro | 0.2.129 | observed | proc macro | |
| wasm-bindgen-shared | 0.2.129 | observed | build script, not run | |
| yaml-sigil-core direct | 0.6.1-rc.1 | observed | build script | |
| zmij | 1.0.23 | observed | build script, not run | |
| adler2 | 2.0.1 | observed | ||
| autocfg | 1.5.1 | observed | ||
| base16ct | 1.0.0 | observed | ||
| base64 direct | 0.23.1 | observed | ||
| base64ct | 1.8.3 | observed | ||
| bitflags | 2.13.2 | observed | ||
| block-buffer | 0.12.1 | observed | ||
| buffa | 0.9.2 | observed | ||
| buffa-build | 0.9.2 | observed | ||
| buffa-codegen | 0.9.2 | observed | ||
| buffa-descriptor | 0.9.2 | observed | ||
| bumpalo | 3.20.3 | observed | ||
| bytes | 1.12.1 | observed | ||
| cc | 1.8.0 | observed | ||
| cfg-if | 1.0.5 | observed | ||
| chacha20 | 0.10.2 | observed | ||
| cmake | 0.1.58 | observed | ||
| cmov | 0.5.4 | observed | ||
| const-oid | 0.10.2 | observed | ||
| cpubits | 0.1.1 | observed | ||
| cpufeatures | 0.3.1 | observed | ||
| crypto-bigint | 0.7.5 | observed | ||
| crypto-common | 0.2.2 | observed | ||
| ctutils | 0.4.3 | observed | ||
| der | 0.8.2 | observed | ||
| digest | 0.11.3 | observed | ||
| dunce | 1.0.5 | observed | ||
| ecdsa | 0.17.0 | observed | ||
| ed25519 | 3.0.0 | observed | ||
| ed25519-dalek direct | 3.0.0 | observed | ||
| elliptic-curve | 0.14.1 | observed | ||
| equivalent | 1.0.2 | observed | ||
| errno | 0.3.14 | observed | ||
| fastrand | 2.5.0 | observed | ||
| ff | 0.14.0 | observed | ||
| fiat-crypto | 0.3.0 | observed | ||
| filetime | 0.2.29 | observed | ||
| find-msvc-tools | 0.1.14 | observed | ||
| flate2 | 1.1.10 | observed | ||
| foldhash | 0.1.5 | observed | ||
| fs_extra | 1.3.0 | observed | ||
| getrandom | 0.2.17 | observed | ||
| group | 0.14.0 | observed | ||
| hashbrown | 0.15.5 | observed | ||
| hashbrown | 0.17.1 | observed | ||
| hex | 0.4.3 | observed | ||
| hmac | 0.13.0 | observed | ||
| http | 1.5.0 | observed | ||
| hybrid-array | 0.4.15 | observed | ||
| indexmap | 2.14.2 | observed | ||
| itoa | 1.0.18 | observed | ||
| jobserver | 0.1.35 | observed | ||
| js-sys | 0.3.106 | observed | ||
| linux-raw-sys | 0.12.1 | observed | ||
| log | 0.4.34 | observed | ||
| memchr | 2.8.3 | observed | ||
| minisign-verify | 0.2.5 | observed | ||
| miniz_oxide | 0.9.1 | observed | ||
| once_cell | 1.21.4 | observed | ||
| p256 direct | 0.14.0 | observed | ||
| percent-encoding | 2.3.2 | observed | ||
| pin-project-lite | 0.2.17 | observed | ||
| pkcs8 | 0.11.0 | observed | ||
| pkg-config | 0.3.34 | observed | ||
| primefield | 0.14.0 | observed | ||
| primeorder | 0.14.0 | observed | ||
| r-efi | 6.0.0 | observed | ||
| rand | 0.10.3 | observed | ||
| rand_core | 0.10.1 | observed | ||
| rfc6979 | 0.6.0 | observed | ||
| rustc-hash | 2.1.3 | observed | ||
| rustc_version | 0.4.1 | observed | ||
| rustls-pki-types | 1.15.1 | observed | ||
| rustls-webpki | 0.103.15 | observed | ||
| sec1 | 0.8.1 | observed | ||
| semver | 1.0.28 | observed | ||
| serde_spanned | 1.1.2 | observed | ||
| sha2 direct | 0.11.0 | observed | ||
| shlex | 2.0.1 | observed | ||
| signature direct | 3.0.0 | observed | ||
| simd-adler32 | 0.3.10 | observed | ||
| simdutf8 | 0.1.5 | observed | ||
| smallvec | 1.16.3 | observed | ||
| smoothutf8 | 0.2.3 | observed | ||
| spki | 0.8.1 | observed | ||
| subtle | 2.6.1 | observed | ||
| syn | 2.0.119 | observed | ||
| syn | 3.0.9 | observed | ||
| tar | 0.4.46 | observed | ||
| tempfile | 3.27.0 | observed | ||
| tokio | 1.53.2 | observed | ||
| toml | 1.1.8+spec-1.1.0 | observed | ||
| toml_datetime | 1.1.2+spec-1.1.0 | observed | ||
| toml_parser | 1.1.5+spec-1.1.0 | observed | ||
| tracing direct | 0.1.44 | observed | ||
| tracing-core | 0.1.36 | observed | ||
| typenum | 1.20.1 | observed | ||
| unicode-ident | 1.0.27 | observed | ||
| untrusted | 0.9.0 | observed | ||
| ureq | 3.4.2 | observed | ||
| ureq-proto | 0.6.4 | observed | ||
| utf8-zero | 0.8.1 | observed | ||
| wasi | 0.11.1+wasi-snapshot-preview1 | observed | ||
| wasm-bindgen-macro-support | 0.2.129 | observed | ||
| webpki-roots | 1.0.9 | observed | ||
| windows-link | 0.2.1 | observed | ||
| windows-sys | 0.52.0 | observed | ||
| windows-sys | 0.61.2 | observed | ||
| windows-targets | 0.52.6 | observed | ||
| winnow | 1.0.4 | observed | ||
| wnaf | 0.14.1 | observed | ||
| xattr | 1.6.1 | observed | ||
| yaml-sigil-signing | 0.6.1-rc.1 | observed | ||
| yaml-sigil-traits direct | 0.4.1 | observed | ||
| yaml-sigil-transcription direct | 0.6.1-rc.1 | observed | ||
| zeroize | 1.9.1 | observed | ||
| zlib-rs | 0.6.8 | observed |
1 of 1 jobs captured: build-test success · Generated 2026-10-12 · run e26cea8e-daf7-4a01-908c-35092e22f7b2
analysis 0.1.0 · 2026-10-11 · d6246d3 · graph v2