{
  "ml": {
    "v": "7",
    "id": 704,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000011632840141828638,
    "type": "rust",
    "version": "v18.18",
    "analyzed_at": "2026-09-22T17:10:49Z"
  },
  "path": "cargo-deny-action@v2.1.1",
  "raw": {
    "rev": "75c9b",
    "files": [
      {
        "id": 775,
        "mol": "K(Am₂)O₅(CaDyPSXe)H₆(Cm₇CrDbF₇Os₂Po)Md₂(Bk₂)",
        "pid": 16,
        "rel": "fetched",
        "sha": "06fd7abd03e824af33d7b6e4e1e05d43d043b533f12e98995fc4a2777a26c644",
        "via": "https://codeload.github.com/embarkstudios/cargo-deny-action/tar.gz/v2.1.1",
        "path": "pkg:github/embarkstudios/cargo-deny-action@v2.1.1",
        "risk": 19,
        "size": 13109,
        "type": "gz",
        "depth": 2,
        "facts": {
          "metrics": {
            "file": {
              "size": 13109,
              "entropy": 7.98
            },
            "binary": {
              "peak_region_bytes": 13109,
              "peak_region_entropy": 7.82
            }
          }
        },
        "traits": [
          {
            "id": "objectives/credential-access/ssh/key::private-key-path-rsa",
            "conf": 0.6,
            "crit": 3,
            "desc": "SSH RSA private-key path literal",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/redirect::shell-echo-file-write",
            "conf": 0.86,
            "crit": 3,
            "desc": "Shell echo redirects output to file"
          },
          {
            "id": "well-known/app/finance/bitcoin-core::test-tree-member",
            "conf": 0.98,
            "crit": 3,
            "desc": "Bitcoin Core test, CI, or contrib member",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "micro-behaviors/crypto/hash/file::pinned-artifact-digest-constant",
            "conf": 0.9,
            "crit": 3,
            "desc": "Pins an expected SHA-256 digest constant",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/path/private-key::keys",
            "atk": "T1552.004",
            "conf": 0.8,
            "crit": 1,
            "desc": "SSH keys directory path literal",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "well-known/app/infrastructure/linkerd::github-repo",
            "conf": 0.98,
            "crit": 3,
            "desc": "Linkerd 1.x GitHub repository",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/build/ci/github-actions::workflow-definition-path",
            "conf": 0.99,
            "crit": 3,
            "desc": "GitHub Actions workflow definition path",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl-silent-long-flag-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "Curl silent option with remote URL"
          },
          {
            "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-4",
            "atk": "T1552.001",
            "mbc": "B0029",
            "conf": 0.9,
            "crit": 3,
            "desc": "SSH private-key or known-hosts path literal",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl-silent-fail-flags-text",
            "atk": "T1105",
            "conf": 0.86,
            "crit": 3,
            "desc": "curl text contains silent or fail flags"
          },
          {
            "id": "micro-behaviors/fs/path/secret-config::ssh-dir",
            "atk": "T1552.001",
            "conf": 0.95,
            "crit": 3,
            "desc": ".ssh directory path",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "objectives/credential-access/ssh/key::known-hosts",
            "atk": "T1552.004",
            "conf": 0.5,
            "crit": 3,
            "desc": "SSH .ssh/known_hosts path reference",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/build/ci/step::mutable-version-action-ref",
            "conf": 0.9,
            "crit": 3,
            "desc": "Workflow action uses mutable version tag"
          },
          {
            "id": "metadata/file/string/identity::multi-architecture-name-set--other",
            "conf": 0.9,
            "crit": 1,
            "desc": "x86, ARC, or MPSL architecture reference"
          },
          {
            "id": "metadata/package/name/convention::cargo-package-name",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package has name"
          },
          {
            "id": "micro-behaviors/process/create/vcs/git::shell-git-commit",
            "atk": "T1059.004",
            "conf": 0.92,
            "crit": 3,
            "desc": "Commits changes to a Git repository",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/redirect::shell-file-write-command",
            "conf": 0.86,
            "crit": 3,
            "desc": "Shell command redirects output to file",
            "from": [
              {
                "off": 381,
                "file": 777,
                "line": 16
              }
            ],
            "uses": [
              1
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl-silent-short-flag-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "Curl silent flag with remote URL"
          },
          {
            "id": "micro-behaviors/communications/url/construction/template::url-double-brace-placeholder",
            "conf": 0.94,
            "crit": 3,
            "desc": "URL embeds a {{ }} template placeholder",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/arch::multiple-architecture-references--x86-or-amd64",
            "conf": 0.94,
            "crit": 3,
            "desc": "x86 or AMD64 architecture reference"
          },
          {
            "id": "objectives/supply-chain/hidden-payload/ci::gha-action-yml-manifest",
            "atk": "T1195.002",
            "conf": 0.98,
            "crit": 3,
            "desc": "GitHub Action action.yml manifest",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/cli::fetch-command-position-script",
            "conf": 0.9,
            "crit": 1,
            "desc": "curl/wget in shell command position"
          },
          {
            "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-5",
            "atk": "T1552.001",
            "mbc": "B0029",
            "conf": 0.9,
            "crit": 3,
            "desc": "ECDSA or Ed25519 SSH key path literal",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/shell::fetch-command-with-var",
            "atk": "T1105",
            "conf": 0.9,
            "crit": 3,
            "desc": "curl or wget references shell variable"
          },
          {
            "id": "objectives/execution/exploit/sandbox-escape::network-tool-token",
            "atk": "T1059.004,T1611",
            "conf": 0.94,
            "crit": 3,
            "desc": "Shell invokes a network utility"
          },
          {
            "id": "metadata/package/name/convention::cargo-license-field",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package declares license"
          },
          {
            "id": "metadata/file/string/cicd::github-workflow-file-path",
            "conf": 0.98,
            "crit": 3,
            "desc": "GitHub Actions workflow file path",
            "from": [
              {
                "file": 7
              }
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist",
            "atk": "T1082",
            "mbc": "E1082",
            "conf": 0.85,
            "crit": 3,
            "desc": "Shell lists architecture selector names",
            "from": [
              {
                "file": 780
              }
            ],
            "uses": [
              49
            ]
          },
          {
            "id": "metadata/package/version::cargo-package-version",
            "conf": 0.85,
            "crit": 2,
            "desc": "Cargo package has version"
          },
          {
            "id": "metadata/package/testing/harness/runtime::is-test",
            "conf": 0.9,
            "crit": 2,
            "desc": "Test, spec, or fixture file",
            "from": [
              {
                "file": 784
              },
              {
                "file": 785
              }
            ],
            "uses": [
              62
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/release::forge-release-download-url",
            "conf": 0.95,
            "crit": 3,
            "desc": "References a release download URL path"
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl-cmd",
            "atk": "T1105",
            "conf": 0.7,
            "crit": 2,
            "desc": "curl command includes URL or option"
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl",
            "atk": "T1105",
            "conf": 0.66,
            "crit": 3,
            "desc": "Download via curl",
            "from": [
              {
                "file": 780
              }
            ],
            "uses": [
              32
            ]
          },
          {
            "id": "micro-behaviors/fs/path/private-key::ssh-private-key",
            "atk": "T1552.001",
            "conf": 0.95,
            "crit": 3,
            "desc": "SSH private-key path literal",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/curl::curl-command-remote-url",
            "conf": 0.85,
            "crit": 3,
            "desc": "curl command names a remote HTTP(S) URL"
          },
          {
            "id": "micro-behaviors/data/archive/extract/tar::tar-extract-system-binary-destination",
            "conf": 0.82,
            "crit": 3,
            "desc": "Tar extracts into system binary directory"
          },
          {
            "id": "micro-behaviors/fs/chmod/modify::chmod-command",
            "atk": "T1222",
            "mbc": "E1222",
            "conf": 0.6,
            "crit": 3,
            "desc": "chmod shell command",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/curl::curl-silent-fail-flags-embedded-text",
            "atk": "T1105",
            "conf": 0.86,
            "crit": 3,
            "desc": "Non-shell curl text contains quiet flags",
            "from": [
              {
                "file": 5
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/ssh/connect::ssh-string",
            "atk": "T1021.004",
            "conf": 0.4,
            "crit": 1,
            "desc": "References the SSH protocol",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/path/secret-config::ssh-directory-literal",
            "conf": 0.8,
            "crit": 3,
            "desc": "References the user SSH directory",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "objectives/discovery/host/application/endpoint::git-credential-helper-check",
            "atk": "T1046",
            "conf": 0.86,
            "crit": 3,
            "desc": "Git credential helper check",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/path/location::top-level-root-path",
            "conf": 0.96,
            "crit": 3,
            "desc": "References top-level /root path",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "objectives/credential-access/files/config::ssh-private-key-path",
            "atk": "T1552.001",
            "mbc": "B0029",
            "conf": 0.9,
            "crit": 3,
            "desc": "SSH private-key path literal",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/path/token::git-credentials",
            "atk": "T1552.001",
            "conf": 0.95,
            "crit": 3,
            "desc": "Git credentials file",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/os/sysinfo/platform/string::multi-arch-runtime-wordlist--x86-or-mips",
            "atk": "T1082",
            "mbc": "E1082",
            "conf": 0.85,
            "crit": 1,
            "desc": "Shell x86 or MIPS architecture selector"
          },
          {
            "id": "micro-behaviors/fs/directory/mkdir::mkdir-command",
            "conf": 0.8,
            "crit": 3,
            "desc": "Shell invokes mkdir command",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/path/location::env-home-hidden-path",
            "conf": 0.9,
            "crit": 3,
            "desc": "Hidden path under HOME variable",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "objectives/credential-access/ssh/key::slash-dot-ssh",
            "atk": "T1552.004",
            "conf": 0.5,
            "crit": 3,
            "desc": "SSH config or known_hosts path reference",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/directory/chdir::shell-change-directory",
            "conf": 0.95,
            "crit": 3,
            "desc": "Shell changes working directory",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/package/testing/presence/harness::test-directory-path",
            "conf": 1.0,
            "crit": 2,
            "desc": "File is in common test directory",
            "from": [
              {
                "file": 9
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "from": [
              {
                "file": 13
              }
            ]
          },
          {
            "id": "micro-behaviors/fs/path/private-key::ssh-private-key-filename-rsa",
            "atk": "T1552.001",
            "conf": 0.95,
            "crit": 3,
            "desc": "id_rsa filename constant",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "objectives/credential-access/files/config::credential-path-table--rx-9",
            "atk": "T1552.001",
            "mbc": "B0029",
            "conf": 0.9,
            "crit": 3,
            "desc": "Git credential-file path literal",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "from": [
              {
                "file": 4
              }
            ]
          },
          {
            "id": "micro-behaviors/process/create/vcs/git::shell-git-push",
            "atk": "T1059.004",
            "conf": 0.92,
            "crit": 3,
            "desc": "Pushes commits to a Git remote",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "micro-behaviors/communications/url/external/github::github-release-download",
            "atk": "T1105",
            "conf": 0.85,
            "crit": 3,
            "desc": "GitHub release asset URL template"
          },
          {
            "id": "metadata/package/testing/presence/harness::test-directory",
            "conf": 1.0,
            "crit": 2,
            "desc": "File identified as a test by path or name",
            "from": [
              {
                "file": 784
              },
              {
                "file": 785
              }
            ],
            "uses": [
              54
            ]
          },
          {
            "id": "objectives/persistence/system/init/script::root-binary-quoted-path",
            "atk": "T1543",
            "conf": 0.82,
            "crit": 3,
            "desc": "Quoted binary path under /root",
            "from": [
              {
                "file": 2
              }
            ]
          },
          {
            "id": "metadata/file/extension/identity::shell-a",
            "conf": 1.0,
            "crit": 2,
            "desc": "POSIX shell script extension",
            "from": [
              {
                "file": 1
              }
            ]
          }
        ]
      }
    ]
  }
}