google / oss-rebuild

Securing open-source package ecosystems by originating, validating, and augmenting build attestations.
Apache License 2.0
30 stars 3 forks source link

Rust crate pack with --manifest-path #106

Open msuozzo opened 1 week ago

msuozzo commented 1 week ago

The current crates.io support uses --package to handle crates both with and without workspaces. Another option @orhun pointed out was to use the --manifest-path which appears to have better support and less variability across packages. Worth some further investigation.

orhun commented 4 days ago

I'm also happy to take a look if you can give me some pointers about how things work now vs. how you expect them to work :)