rustsec / rustsec

RustSec API & Tooling

https://rustsec.org/

rustsec/rustsec Issues

`BinCommand` duplicates options of `AuditCommand` in `cargo-audit`
Updated 2 months ago2
Allow to specify multiple `--target-os` and `--target-arch`
Updated 2 months ago3
Document possible values of `--target-os` and `--target-arch`
Updated 2 months ago
cargo-audit creates "advisory-db..lock" with two dots
Updated 2 months ago
`rustsec` crate locked to yanked versions of `tame-index`
Updated 2 months ago5
cargo deny check fails to pull advisory.db (but cargo audit works)
Closed 2 months ago3
Add `--locked` to installation instructions of our tooling
Closed 2 months ago3
Can't run cargo-audit in Cirrus CI with FreeBSD 13.3
Updated 2 months ago4
Unable to build cargo-audit v0.20.0
Closed 2 months ago10
Fix CI for `admin`
Updated 2 months ago
Fresh install on macos fails
Updated 3 months ago2
Failed to build after updating lockfile
Closed 3 months ago1
cargo install cargo-audit fails due to fail to compile gix-ref v0.41.0
Closed 3 months ago6
Cyclic dependency graph error for dev-dependency
Closed 3 months ago4
RUSTSEC-2024-0013: Memory corruption, denial of service, and arbitrary code execution in libgit2
Closed 3 months ago2
can't run under WSL with zscaler
Closed 4 months ago21
Security vulnerability in `libgit2-sys` potentially affecting us through the `fix` feature
Closed 3 months ago1
Cargo audit false positives for optional dependencies pulled in by disabled features.
Updated 3 months ago9
Support `Cargo.lock` v4 format
Updated 3 months ago
cvss: v4.0 support
Updated 4 months ago1
Record historical, no longer supported target triples in `platforms` crate
Updated 4 months ago4
Cargo audit pulls clap 4.5, which needs rustc 1.74 (where the MSRV is 1.70 for cargo audit)
Updated 4 months ago3
cargo-audit: Audit crate project status
Closed 4 months ago1
[cvss]: Unable to parse vectors with temporal score component
Updated 4 months ago1
Cargo audit thinks all crates with the same name are the same crate.
Closed 5 months ago1
gix version is out of date, causes major duplication
Closed 6 months ago6
Global database configuration is ignored when advisories are locally configured
Updated 6 months ago
cargo-audit: Provide SARIF export of findings
Updated 6 months ago2
Documentation on `database.fetch` config is confusing
Updated 6 months ago
cargo install fails due to broken dependency -- no Cargo.lock present
Closed 6 months ago2
cargo-audit fails to fetch advisory database: "Could initialize the http client"
Updated 6 months ago12
Chains of errors cut off
Closed 6 months ago1
cargo-audit hangs with "Blocking waiting for file lock on package cache"
Closed 7 months ago3
0.18.3 failing tests: poisoned cmd mutex!: PoisonError
Updated 7 months ago2
Missing 0.18.x releases?
Closed 7 months ago2
Ignore advisories *temporarily*?
Updated 7 months ago1
Refactor signature extraction to make use of `gix`'s `.signature()`
Updated 7 months ago
Consider configuring `gix` with `max-performance-safe`
Closed 7 months ago1
`rustsec` crate fails to build with latest dependencies (after a `cargo update`)
Closed 7 months ago1
Stale lockfile encountered in the wild
Closed 8 months ago2
`core.askpass could not be read`
Closed 8 months ago9
cargo audit command does not provide a description
Closed 8 months ago4
Upgrade to `tame-index` 0.6.0 to fix RUSTSEC-2023-0064
Closed 8 months ago
Custom cargo audit RustSec advisory database URL
Closed 8 months ago2
`cargo-audit` not reporting known vulnerabilities in `libflate 0.1.19`
Closed 8 months ago1
cargo-audit fails to compile
Closed 9 months ago4
Incosistency between config file and CLI
Closed 9 months ago
cargo-audit fails to check yanked status behind corporate transparent proxy
Closed 9 months ago7
Regression: unsound crates no longer reported by `cargo audit bin`
Closed 9 months ago2
Make lock timeout configurable
Updated 9 months ago