[INFO] cloning repository https://github.com/Vericious/moat [INFO] running `Command { std: "git" "-c" "credential.helper=" "-c" "credential.helper=/workspace/cargo-home/bin/git-credential-null" "clone" "--bare" "https://github.com/Vericious/moat" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2FVericious%2Fmoat", kill_on_drop: false }` [INFO] [stderr] Cloning into bare repository '/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2FVericious%2Fmoat'... [INFO] running `Command { std: "git" "rev-parse" "HEAD", kill_on_drop: false }` [INFO] [stdout] d9fe040cb96436e1039d3148b6016d52ba92e7d5 [INFO] testing Vericious/moat against 1.100.0-beta.1+cargoflags=--release for beta-release-1.100-2 [INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2FVericious%2Fmoat" "/workspace/builds/worker-7-tc2/source", kill_on_drop: false }` [INFO] [stderr] Cloning into '/workspace/builds/worker-7-tc2/source'... [INFO] [stderr] done. [INFO] started tweaking git repo https://github.com/Vericious/moat [INFO] removed 0 missing tests [INFO] finished tweaking git repo https://github.com/Vericious/moat [INFO] tweaked toml for git repo https://github.com/Vericious/moat written to /workspace/builds/worker-7-tc2/source/Cargo.toml [INFO] validating manifest of git repo https://github.com/Vericious/moat on toolchain 1.100.0-beta.1 [INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+1.100.0-beta.1" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }` [INFO] crate git repo https://github.com/Vericious/moat already has a lockfile, it will not be regenerated [INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+1.100.0-beta.1" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }` [INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-7-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-7-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-m" "1610612736" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:77db811e55d90add9212f6832c23229e3de5f1c1f9905e8cb07319ea15df73ac" "sleep" "infinity", kill_on_drop: false }` [INFO] [stdout] 10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5 [INFO] running `Command { std: "docker" "start" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5", kill_on_drop: false }` [INFO] running `Command { std: "docker" "inspect" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-w" "/opt/rustwide/workdir" "--user" "0:0" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5" "/opt/rustwide/cargo-home/bin/cargo" "+1.100.0-beta.1" "metadata" "--no-deps" "--format-version=1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "inspect" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5" "/opt/rustwide/cargo-home/bin/cargo" "+1.100.0-beta.1" "build" "--frozen" "--message-format=json" "--release", kill_on_drop: false }` [INFO] [stderr] Compiling quote v1.0.45 [INFO] [stderr] Compiling libc v0.2.183 [INFO] [stderr] Compiling pin-project-lite v0.2.17 [INFO] [stderr] Compiling futures-core v0.3.32 [INFO] [stderr] Compiling parking_lot_core v0.9.12 [INFO] [stderr] Compiling bytes v1.11.1 [INFO] [stderr] Compiling memchr v2.8.0 [INFO] [stderr] Compiling futures-sink v0.3.32 [INFO] [stderr] Compiling futures-task v0.3.32 [INFO] [stderr] Compiling futures-io v0.3.32 [INFO] [stderr] Compiling slab v0.4.12 [INFO] [stderr] Compiling serde_core v1.0.228 [INFO] [stderr] Compiling cc v1.2.58 [INFO] [stderr] Compiling once_cell v1.21.4 [INFO] [stderr] Compiling litemap v0.8.1 [INFO] [stderr] Compiling writeable v0.6.2 [INFO] [stderr] Compiling icu_normalizer_data v2.1.1 [INFO] [stderr] Compiling icu_properties_data v2.1.2 [INFO] [stderr] Compiling percent-encoding v2.3.2 [INFO] [stderr] Compiling futures-channel v0.3.32 [INFO] [stderr] Compiling zeroize v1.8.2 [INFO] [stderr] Compiling atomic-waker v1.1.2 [INFO] [stderr] Compiling serde v1.0.228 [INFO] [stderr] Compiling rustls v0.23.37 [INFO] [stderr] Compiling base64 v0.22.1 [INFO] [stderr] Compiling tracing-core v0.1.36 [INFO] [stderr] Compiling rustls-pki-types v1.14.0 [INFO] [stderr] Compiling ipnet v2.12.0 [INFO] [stderr] Compiling form_urlencoded v1.2.2 [INFO] [stderr] Compiling serde_json v1.0.149 [INFO] [stderr] Compiling sync_wrapper v1.0.2 [INFO] [stderr] Compiling log v0.4.29 [INFO] [stderr] Compiling owo-colors v4.3.0 [INFO] [stderr] Compiling regex-syntax v0.8.10 [INFO] [stderr] Compiling anyhow v1.0.102 [INFO] [stderr] Compiling iri-string v0.7.12 [INFO] [stderr] Compiling syn v2.0.117 [INFO] [stderr] Compiling bitflags v2.11.0 [INFO] [stderr] Compiling webpki-roots v1.0.6 [INFO] [stderr] Compiling tracing v0.1.44 [INFO] [stderr] Compiling aho-corasick v1.1.4 [INFO] [stderr] Compiling http v1.4.0 [INFO] [stderr] Compiling ring v0.17.14 [INFO] [stderr] Compiling errno v0.3.14 [INFO] [stderr] Compiling socket2 v0.6.3 [INFO] [stderr] Compiling mio v1.2.0 [INFO] [stderr] Compiling getrandom v0.2.17 [INFO] [stderr] Compiling signal-hook-registry v1.4.8 [INFO] [stderr] Compiling parking_lot v0.12.5 [INFO] [stderr] Compiling regex-automata v0.4.14 [INFO] [stderr] Compiling http-body v1.0.1 [INFO] [stderr] Compiling http-body-util v0.1.3 [INFO] [stderr] Compiling serde_with v3.18.0 [INFO] [stderr] Compiling synstructure v0.13.2 [INFO] [stderr] Compiling regex v1.12.3 [INFO] [stderr] Compiling zerofrom-derive v0.1.6 [INFO] [stderr] Compiling yoke-derive v0.8.1 [INFO] [stderr] Compiling zerovec-derive v0.11.2 [INFO] [stderr] Compiling displaydoc v0.2.5 [INFO] [stderr] Compiling tokio-macros v2.6.1 [INFO] [stderr] Compiling futures-macro v0.3.32 [INFO] [stderr] Compiling serde_derive v1.0.228 [INFO] [stderr] Compiling serde_repr v0.1.20 [INFO] [stderr] Compiling thiserror-impl v1.0.69 [INFO] [stderr] Compiling clap_derive v4.6.0 [INFO] [stderr] Compiling futures-util v0.3.32 [INFO] [stderr] Compiling tokio v1.50.0 [INFO] [stderr] Compiling zerofrom v0.1.6 [INFO] [stderr] Compiling yoke v0.8.1 [INFO] [stderr] Compiling zerotrie v0.2.3 [INFO] [stderr] Compiling zerovec v0.11.5 [INFO] [stderr] Compiling thiserror v1.0.69 [INFO] [stderr] Compiling clap v4.6.0 [INFO] [stderr] Compiling tinystr v0.8.2 [INFO] [stderr] Compiling potential_utf v0.1.4 [INFO] [stderr] Compiling icu_collections v2.1.1 [INFO] [stderr] Compiling icu_locale_core v2.1.1 [INFO] [stderr] Compiling icu_provider v2.1.1 [INFO] [stderr] Compiling serde_urlencoded v0.7.1 [INFO] [stderr] Compiling bollard-stubs v1.45.0-rc.26.0.1 [INFO] [stderr] Compiling icu_properties v2.1.2 [INFO] [stderr] Compiling icu_normalizer v2.1.1 [INFO] [stderr] Compiling futures-executor v0.3.32 [INFO] [stderr] Compiling futures v0.3.32 [INFO] [stderr] Compiling idna_adapter v1.2.1 [INFO] [stderr] Compiling idna v1.1.0 [INFO] [stderr] Compiling url v2.5.8 [INFO] [stderr] Compiling hyper v1.8.1 [INFO] [stderr] Compiling tower v0.5.3 [INFO] [stderr] Compiling tokio-util v0.7.18 [INFO] [stderr] Compiling tower-http v0.6.8 [INFO] [stderr] Compiling hyper-util v0.1.20 [INFO] [stderr] Compiling rustls-webpki v0.103.10 [INFO] [stderr] Compiling hyperlocal v0.9.1 [INFO] [stderr] Compiling tokio-rustls v0.26.4 [INFO] [stderr] Compiling hyper-rustls v0.27.7 [INFO] [stderr] Compiling bollard v0.17.1 [INFO] [stderr] Compiling reqwest v0.12.28 [INFO] [stderr] Compiling moat v0.1.0 (/opt/rustwide/workdir) [INFO] [stderr] warning: unused dependency `futures` [INFO] [stderr] --> Cargo.toml:4:1 [INFO] [stderr] | [INFO] [stderr] 4 | futures = "0.3" [INFO] [stderr] | ^^^^^^^^^^^^^^^ [INFO] [stderr] | [INFO] [stderr] = note: `cargo::unused_dependencies` is set to `warn` by default [INFO] [stderr] help: consider removing the dependency on `futures` [INFO] [stderr] warning: unused dependency `owo-colors` [INFO] [stderr] --> Cargo.toml:6:1 [INFO] [stderr] | [INFO] [stderr] 6 | owo-colors = "4" [INFO] [stderr] | ^^^^^^^^^^^^^^^^ [INFO] [stderr] | [INFO] [stderr] help: consider removing the dependency on `owo-colors` [INFO] [stderr] warning: unused dependency `regex` [INFO] [stderr] --> Cargo.toml:7:1 [INFO] [stderr] | [INFO] [stderr] 7 | regex = "1" [INFO] [stderr] | ^^^^^^^^^^^ [INFO] [stderr] | [INFO] [stderr] help: consider removing the dependency on `regex` [INFO] [stderr] warning: unused dependency `reqwest` [INFO] [stderr] --> Cargo.toml:15:15 [INFO] [stderr] | [INFO] [stderr] 15 | [dependencies.reqwest] [INFO] [stderr] | ^^^^^^^^ [INFO] [stderr] | [INFO] [stderr] help: consider removing the dependency on `reqwest` [INFO] [stderr] warning: `moat` (manifest) generated 4 warnings [INFO] [stderr] Finished `release` profile [optimized] target(s) in 1m 57s [INFO] running `Command { std: "docker" "inspect" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5" "/opt/rustwide/cargo-home/bin/cargo" "+1.100.0-beta.1" "test" "--frozen" "--no-run" "--message-format=json" "--release", kill_on_drop: false }` [INFO] [stderr] Compiling regex-automata v0.4.14 [INFO] [stderr] Compiling bitflags v2.11.0 [INFO] [stderr] Compiling num-traits v0.2.19 [INFO] [stderr] Compiling getrandom v0.4.2 [INFO] [stderr] Compiling rustix v1.1.4 [INFO] [stderr] Compiling predicates-core v1.0.10 [INFO] [stderr] Compiling difflib v0.4.0 [INFO] [stderr] Compiling assert_cmd v2.2.0 [INFO] [stderr] Compiling normalize-line-endings v0.3.0 [INFO] [stderr] Compiling termtree v0.5.1 [INFO] [stderr] Compiling linux-raw-sys v0.12.1 [INFO] [stderr] Compiling wait-timeout v0.2.1 [INFO] [stderr] Compiling fastrand v2.3.0 [INFO] [stderr] Compiling predicates-tree v1.0.13 [INFO] [stderr] Compiling tower-http v0.6.8 [INFO] [stderr] Compiling float-cmp v0.10.0 [INFO] [stderr] Compiling reqwest v0.12.28 [INFO] [stderr] Compiling tempfile v3.27.0 [INFO] [stderr] Compiling regex v1.12.3 [INFO] [stderr] Compiling bstr v1.12.1 [INFO] [stderr] Compiling predicates v3.1.4 [INFO] [stderr] Compiling moat v0.1.0 (/opt/rustwide/workdir) [INFO] [stderr] Finished `release` profile [optimized] target(s) in 46.26s [INFO] running `Command { std: "docker" "inspect" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5" "/opt/rustwide/cargo-home/bin/cargo" "+1.100.0-beta.1" "test" "--frozen" "--release", kill_on_drop: false }` [INFO] [stderr] Finished `release` profile [optimized] target(s) in 0.25s [INFO] [stderr] Running unittests src/main.rs (/opt/rustwide/target/release/build/moat/dc0fc445942b1305/out/moat-dc0fc445942b1305) [INFO] [stdout] [INFO] [stdout] running 179 tests [INFO] [stdout] test checks::capabilities::tests::test_empty_capabilities_produces_no_findings ... ok [INFO] [stdout] test checks::capabilities::tests::test_multiple_dangerous_caps_produce_multiple_findings ... ok [INFO] [stdout] test checks::capabilities::tests::test_dac_override_produces_critical_finding ... ok [INFO] [stdout] test checks::cpu_limit::tests::test_no_cpu_limit_triggers_medium_finding ... ok [INFO] [stdout] test checks::capabilities::tests::test_findings_have_remediation ... ok [INFO] [stdout] test checks::capabilities::tests::test_safe_capabilities_produce_no_findings ... ok [INFO] [stdout] test checks::capabilities::tests::test_sys_admin_produces_critical_finding ... ok [INFO] [stdout] test checks::cpu_limit::tests::test_finding_has_remediation ... ok [INFO] [stdout] test checks::capabilities::tests::test_net_admin_produces_critical_finding ... ok [INFO] [stdout] test checks::env_secrets::tests::test_api_key_triggers ... ok [INFO] [stdout] test checks::cpu_limit::tests::test_with_zero_cpu_limit_triggers_finding ... ok [INFO] [stdout] test checks::env_secrets::tests::test_private_key_triggers ... ok [INFO] [stdout] test checks::env_secrets::tests::test_only_key_no_value ... ok [INFO] [stdout] test checks::env_secrets::tests::test_no_env_passes ... ok [INFO] [stdout] test checks::env_secrets::tests::test_db_password_triggers ... ok [INFO] [stdout] test checks::env_secrets::tests::test_mytoken_count_passes ... ok [INFO] [stdout] test checks::exposed_ports::tests::test_empty_host_ip_triggers_medium ... ok [INFO] [stdout] test checks::exposed_ports::tests::test_mixed_exposed_and_unexposed ... ok [INFO] [stdout] test checks::exposed_ports::tests::test_specific_ip_triggers_low ... ok [INFO] [stdout] test checks::health_check::tests::test_has_health_check_produces_no_finding ... ok [INFO] [stdout] test checks::health_check::tests::test_no_health_check_produces_finding ... ok [INFO] [stdout] test checks::exposed_ports::tests::test_no_ports_produces_no_findings ... ok [INFO] [stdout] test checks::host_mounts::tests::test_mixed_sensitive_and_safe ... ok [INFO] [stdout] test checks::host_mounts::tests::test_multiple_sensitive_mounts ... ok [INFO] [stdout] test checks::host_mounts::tests::test_nested_etc_triggers ... ok [INFO] [stdout] test checks::host_mounts::tests::test_nested_home_triggers ... ok [INFO] [stdout] test checks::capabilities::tests::test_case_insensitive_cap_matching ... ok [INFO] [stdout] test checks::host_mounts::tests::test_no_mounts_passes ... ok [INFO] [stdout] test checks::cpu_limit::tests::test_with_half_cpu_limit_produces_no_finding ... ok [INFO] [stdout] test checks::env_secrets::tests::test_token_as_prefix_triggers ... ok [INFO] [stdout] test checks::host_mounts::tests::test_proc_mount_triggers ... ok [INFO] [stdout] test checks::env_secrets::tests::test_path_passes ... ok [INFO] [stdout] test checks::env_secrets::tests::test_multiple_secrets ... ok [INFO] [stdout] test checks::host_mounts::tests::test_root_mount_triggers ... ok [INFO] [stdout] test checks::exposed_ports::tests::test_0_0_0_0_8080_triggers_medium ... ok [INFO] [stdout] test checks::env_secrets::tests::test_token_as_suffix_triggers ... ok [INFO] [stdout] test checks::exposed_ports::tests::test_127_0_0_1_8080_triggers_low ... ok [INFO] [stdout] test checks::env_secrets::tests::test_secret_key_case_insensitive ... ok [INFO] [stdout] test checks::exposed_ports::tests::test_multiple_exposed_ports ... ok [INFO] [stdout] test checks::host_network::tests::test_bridge_network_produces_no_finding ... ok [INFO] [stdout] test checks::host_network::tests::test_host_network_produces_finding ... ok [INFO] [stdout] test checks::host_mounts::tests::test_sys_mount_triggers ... ok [INFO] [stdout] test checks::image_freshness::tests::test_case_insensitive_latest ... ok [INFO] [stdout] test checks::image_freshness::tests::test_latest_tag_produces_finding ... ok [INFO] [stdout] test checks::image_freshness::tests::test_sha_reference_produces_no_finding ... ok [INFO] [stdout] test checks::memory_limit::tests::test_finding_has_remediation ... ok [INFO] [stdout] test checks::memory_limit::tests::test_no_memory_limit_triggers_medium_finding ... ok [INFO] [stdout] test checks::host_mounts::tests::test_var_run_mount_triggers ... ok [INFO] [stdout] test checks::host_mounts::tests::test_data_mount_passes ... ok [INFO] [stdout] test checks::memory_limit::tests::test_small_memory_limit_still_has_limit ... ok [INFO] [stdout] test checks::image_freshness::tests::test_version_tag_produces_no_finding ... ok [INFO] [stdout] test checks::host_network::tests::test_no_network_mode_produces_no_finding ... ok [INFO] [stdout] test checks::memory_limit::tests::test_with_zero_memory_limit_triggers_finding ... ok [INFO] [stdout] test checks::image_freshness::tests::test_no_tag_produces_finding ... ok [INFO] [stdout] test checks::image_freshness::tests::test_registry_with_latest ... ok [INFO] [stdout] test checks::memory_limit::tests::test_with_memory_limit_produces_no_finding ... ok [INFO] [stdout] test checks::network_isolation::tests::test_host_network_triggers_high_finding ... ok [INFO] [stdout] test checks::network_isolation::tests::test_no_network_mode_produces_no_finding ... ok [INFO] [stdout] test checks::network_isolation::tests::test_bridge_network_produces_no_finding ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_empty_user_string_triggers_finding ... ok [INFO] [stdout] test checks::network_isolation::tests::test_custom_network_produces_no_finding ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_finding_includes_user_info_in_message ... ok [INFO] [stdout] test checks::network_isolation::tests::test_finding_has_remediation ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_no_user_specified_is_root ... ok [INFO] [stdout] test checks::network_isolation::tests::test_none_network_produces_no_finding ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_user_0_with_group_triggers_finding ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_finding_has_remediation ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_user_1000_1000_no_finding ... ok [INFO] [stdout] test checks::host_mounts::tests::test_docker_sock_is_skipped ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_user_1000_no_finding ... ok [INFO] [stdout] test checks::cpu_limit::tests::test_with_cpu_limit_produces_no_finding ... ok [INFO] [stdout] test checks::readonly_rootfs::tests::test_finding_has_remediation ... ok [INFO] [stdout] test checks::resource_limits::tests::test_large_memory_limit_still_has_limit ... ok [INFO] [stdout] test checks::resource_limits::tests::test_no_limits_triggers_two_findings ... ok [INFO] [stdout] test checks::resource_limits::tests::test_only_cpu_set_triggers_one_finding ... ok [INFO] [stdout] test checks::privileged::tests::test_privileged_true_produces_critical_finding ... ok [INFO] [stdout] test checks::privileged::tests::test_safe_capabilities_produce_no_findings ... ok [INFO] [stdout] test checks::privileged::tests::test_sys_admin_cap_produces_high_finding ... ok [INFO] [stdout] test checks::readonly_rootfs::tests::test_readonly_rootfs_produces_no_finding ... ok [INFO] [stdout] test checks::resource_limits::tests::test_only_memory_set_triggers_one_finding ... ok [INFO] [stdout] test checks::resource_limits::tests::test_zero_cpu_limit_triggers_finding ... ok [INFO] [stdout] test checks::privileged::tests::test_case_insensitive_cap_matching ... ok [INFO] [stdout] test checks::privileged::tests::test_clean_container_produces_no_findings ... ok [INFO] [stdout] test checks::privileged::tests::test_multiple_caps_produce_multiple_findings ... ok [INFO] [stdout] test checks::privileged::tests::test_privileged_and_caps_produce_both_findings ... ok [INFO] [stdout] test checks::readonly_rootfs::tests::test_writable_rootfs_triggers_medium_finding ... ok [INFO] [stdout] test checks::root_user::tests::test_user_non_root_uid_produces_no_finding ... ok [INFO] [stdout] test checks::root_user::tests::test_empty_user_string_produces_finding ... ok [INFO] [stdout] test checks::root_user::tests::test_user_appuser_produces_no_finding ... ok [INFO] [stdout] test checks::root_user::tests::test_user_none_produces_finding ... ok [INFO] [stdout] test checks::root_user::tests::test_user_uid_zero_produces_finding ... ok [INFO] [stdout] test checks::host_mounts::tests::test_etc_mount_triggers ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_user_uid_0_triggers_finding ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_user_root_triggers_finding ... ok [INFO] [stdout] test checks::root_user::tests::test_user_zero_produces_finding ... ok [INFO] [stdout] test checks::root_user::tests::test_user_root_produces_finding ... ok [INFO] [stdout] test checks::nonroot_user::tests::test_user_appuser_no_finding ... ok [INFO] [stdout] test checks::root_user::tests::test_whitespace_only_user_produces_finding ... ok [INFO] [stdout] test checks::seccomp::tests::test_named_profile_produces_no_findings ... ok [INFO] [stdout] test checks::resource_limits::tests::test_zero_memory_limit_triggers_finding ... ok [INFO] [stdout] test checks::seccomp::tests::test_no_seccomp_produces_high_finding ... ok [INFO] [stdout] test checks::seccomp::tests::test_unconfined_seccomp_produces_no_findings ... ok [INFO] [stdout] test checks::socket_mount::tests::test_multiple_mounts_one_socket ... ok [INFO] [stdout] test checks::socket_mount::tests::test_multiple_sockets_multiple_findings ... ok [INFO] [stdout] test checks::socket_mount::tests::test_no_mounts_passes ... ok [INFO] [stdout] test checks::socket_mount::tests::test_normal_volume_mount_passes ... ok [INFO] [stdout] test checks::socket_mount::tests::test_run_docker_sock_triggers ... ok [INFO] [stdout] test checks::socket_mount::tests::test_socket_in_destination ... ok [INFO] [stdout] test checks::socket_mount::tests::test_var_run_docker_sock_triggers_critical ... ok [INFO] [stdout] test checks::tests::test_all_checks_have_unique_names ... ok [INFO] [stdout] test checks::tests::test_all_checks_returns_eighteen_checks ... ok [INFO] [stdout] test checks::resource_limits::tests::test_both_set_triggers_zero_findings ... ok [INFO] [stdout] test checks::seccomp::tests::test_finding_has_remediation ... ok [INFO] [stdout] test checks::tests::test_check_trait_is_object_safe ... ok [INFO] [stdout] test checks::tests::test_check_trait_object_safe_with_sync ... ok [INFO] [stdout] test checks::tests::test_check_trait_object_safe_with_send ... ok [INFO] [stdout] test checks::seccomp::tests::test_with_seccomp_profile_produces_no_findings ... ok [INFO] [stdout] test checks::tests::test_dummy_check_runs_without_panic ... ok [INFO] [stdout] test checks::userns_remap::tests::test_host_userns_triggers_finding ... ok [INFO] [stdout] test checks::userns_remap::tests::test_named_userns_produces_no_finding ... ok [INFO] [stdout] test checks::userns_remap::tests::test_no_userns_triggers_medium_finding ... ok [INFO] [stdout] test container::tests::test_container_info_with_values ... ok [INFO] [stdout] test container::tests::test_default_container_info ... ok [INFO] [stdout] test container::tests::test_default_mount_info ... ok [INFO] [stdout] test container::tests::test_from_inspect_response_capability_extraction ... ok [INFO] [stdout] test container::tests::test_from_inspect_response_cpu_limit_nanoseconds ... ok [INFO] [stdout] test container::tests::test_from_inspect_response_full_data ... ok [INFO] [stdout] test container::tests::test_from_inspect_response_minimal_data ... ok [INFO] [stdout] test container::tests::test_mount_info_fields ... ok [INFO] [stdout] test container::tests::test_name_extraction_empty ... ok [INFO] [stdout] test container::tests::test_name_extraction_multiple_leading_slashes ... ok [INFO] [stdout] test container::tests::test_default_port_info ... ok [INFO] [stdout] test container::tests::test_name_extraction_no_leading_slash ... ok [INFO] [stdout] test container::tests::test_port_info_fields ... ok [INFO] [stdout] test finding::tests::test_finding_clone ... ok [INFO] [stdout] test finding::tests::test_finding_creation_with_all_fields ... ok [INFO] [stdout] test finding::tests::test_finding_creation_without_remediation ... ok [INFO] [stdout] test finding::tests::test_finding_debug_impl ... ok [INFO] [stdout] test finding::tests::test_finding_serialization_to_json ... ok [INFO] [stdout] test finding::tests::test_severity_all_variants_display ... ok [INFO] [stdout] test finding::tests::test_severity_critical_display ... ok [INFO] [stdout] test report::json::tests::test_json_reporter_empty_findings ... ok [INFO] [stdout] test report::json::tests::test_json_reporter_produces_valid_json ... ok [INFO] [stdout] test report::markdown::tests::test_markdown_reporter_empty_findings ... ok [INFO] [stdout] test report::json::tests::test_json_reporter_with_findings ... ok [INFO] [stdout] test report::markdown::tests::test_markdown_reporter_includes_summary ... ok [INFO] [stdout] test container::tests::test_name_extraction_strips_leading_slash ... ok [INFO] [stdout] test report::markdown::tests::test_markdown_reporter_with_finding ... ok [INFO] [stdout] test report::tests::test_get_reporter_json ... ok [INFO] [stdout] test report::tests::test_get_reporter_terminal ... ok [INFO] [stdout] test tests::test_config_exclude_category_from_cli ... ok [INFO] [stdout] test tests::test_config_from_cli ... ok [INFO] [stdout] test tests::test_default_socket_path ... ok [INFO] [stdout] test tests::test_exclude_category_case_insensitive ... ok [INFO] [stdout] test report::tests::test_markdown_reporter_with_no_findings ... ok [INFO] [stdout] test tests::test_exclude_category_empty_by_default ... ok [INFO] [stdout] test tests::test_exclude_category_with_scan_subcommand ... ok [INFO] [stdout] test tests::test_format_parsing ... ok [INFO] [stdout] test tests::test_format_parsing_markdown ... ok [INFO] [stdout] test tests::test_format_parsing_terminal ... ok [INFO] [stdout] test report::tests::test_terminal_reporter_with_no_findings ... ok [INFO] [stdout] test report::tests::test_get_reporter_unknown_returns_error ... ok [INFO] [stdout] test tests::test_output_format_display ... ok [INFO] [stdout] test tests::test_verbose_flag ... ok [INFO] [stdout] test tests::test_verbose_flag_short ... ok [INFO] [stdout] test tests::test_exclude_category_single ... ok [INFO] [stdout] test scanner::tests::test_container_info_from_mock_inspect_data ... ok [INFO] [stdout] test scanner::tests::test_scanner_connection_error_message ... ok [INFO] [stdout] test tests::test_exclude_category_multiple ... ok [INFO] [stdout] test report::tests::test_json_reporter_with_no_findings ... ok [INFO] [stdout] test tests::test_scan_subcommand_socket_override ... ok [INFO] [stdout] test report::tests::test_reporter_trait_is_object_safe ... ok [INFO] [stdout] test tests::test_unknown_format_returns_error ... ok [INFO] [stdout] test scanner::tests::test_scanner_new_with_empty_socket ... ok [INFO] [stdout] test tests::test_version_subcommand ... ok [INFO] [stdout] test scanner::tests::test_scanner_new_with_invalid_socket ... ok [INFO] [stdout] test checks::exposed_ports::tests::test_unexposed_port_produces_no_findings ... ok [INFO] [stdout] test checks::userns_remap::tests::test_finding_has_remediation ... ok [INFO] [stdout] test checks::userns_remap::tests::test_remap_userns_produces_no_finding ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 179 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s [INFO] [stdout] [INFO] [stderr] Running tests/integration/scan_flow.rs (/opt/rustwide/target/release/build/moat/e65ec61de410a85b/out/scan_flow-e65ec61de410a85b) [INFO] [stdout] [INFO] [stdout] running 3 tests [INFO] [stdout] test test_scan_error_handling_when_docker_unavailable ... ok [INFO] [stdout] test test_help_shows_scan_subcommand ... ok [INFO] [stdout] test test_scan_help_shows_socket_option ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s [INFO] [stdout] [INFO] running `Command { std: "docker" "inspect" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5", kill_on_drop: false }` [INFO] running `Command { std: "docker" "rm" "-f" "10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5", kill_on_drop: false }` [INFO] [stdout] 10dd391b0301828728b62f2789ac512ef9a48b39466dfbe5af31744b722a92f5