leordev
commented
8 months ago Sounds like Snyk does not support rust out of the box.
In this CI we will need to run rust tools, such as:
- https://github.com/EmbarkStudios/cargo-deny
- https://github.com/RustSec/rustsec/tree/main/cargo-audit
- https://github.com/psastras/sarif-rs#documentation
(also related to #1 )
We need to set up security scanning (most likely Snyk) for this repository.