mozilla cargo-vet issues

mozilla / cargo-vet

supply-chain security for Rust

Apache License 2.0

618 stars 41 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Error message should suggest `cargo vet fmt` on consistency errors?

#617 pchickey opened 1 week ago
0
Pager invocation should respect pre-existing LESS

#616 afranchuk opened 2 weeks ago
1
Added support for Cargo `http.cainfo`

#615 ranger-ross opened 1 month ago
0
Include criteria which imply the required criteria in suggest output

#614 mystor closed 1 month ago
1
Clarify which audits are recommended when `X` `implies` `Y` criteria

#613 anforowicz closed 1 month ago
1
`cargo vet` should respect `http.cainfo` in Cargo config

#612 ranger-ross opened 1 month ago
0
SourceGraph is unreliable

#611 cemoktra opened 1 month ago
3
Fix clippy

#610 bholley closed 1 month ago
0
remove dollar sign from shell commands

#609 GlenDC closed 1 month ago
1
Multiple audits which are too similar from the same source can be confused

#608 mystor opened 2 months ago
0
`cargo vet aggregate` is not reporting errors correctly

#607 str4d opened 2 months ago
2
supply-chain vs dependencies

#606 pinkforest opened 2 months ago
0
Persistent aggregated repository of all audits in an organization (make `cargo vet aggregate` append only to `audits.toml`)

#605 faern opened 3 months ago
0
Adding new crates to a workspace and forgetting `audit-as-crates-io`

#604 alexcrichton opened 3 months ago
1
Stop depending on PackageId format for node ordering

#603 mystor closed 3 months ago
0
Changes in cargo metadata PackageId format leading to test failures

#602 mystor closed 3 months ago
0
How to selectively import only some audits?

#601 faern opened 3 months ago
4
Install cargo-dist to generate releases

#600 staktrace closed 1 month ago
1
Update metadata for new home

#599 staktrace closed 3 months ago
3
Clean up `rustc` and `clippy` warnings.

#598 anforowicz closed 3 months ago
2
Support host's local certificate store

#597 hpenne opened 3 months ago
4
Bump version of tracing-attributes in lockfile

#596 mystor closed 3 months ago
0
Avoid writing `config.toml` and other files if no significant changes.

#595 anforowicz closed 3 months ago
4
Book: Add repository URL

#594 badboy closed 3 months ago
1
`cargo aggregate` failure due to mismatched criteria description is difficult to diagnose

#593 anforowicz opened 4 months ago
1
Additional tracing messages to diagnose missing audit criteria.

#592 anforowicz closed 3 months ago
7
Lower the requested number of visible lines from sourcegraph to avoid error.

#591 bholley closed 5 months ago
0
Upgrade libz-sys in Cargo.lock

#590 glandium closed 5 months ago
2
`cargo vet certify` unnecessarily reformats `config.toml`

#589 anforowicz opened 5 months ago
10
Prefer local wildcard audits to remote (imported) audits.

#588 afranchuk closed 5 months ago
2
prefer local wildcard audits to remote regular audits

#587 bholley closed 5 months ago
7
Perform import validation when aggregating remote audit files

#586 mystor closed 1 month ago
1
Make a new release with the importable field

#585 ohaponiuk closed 6 months ago
2
Collapse non-importable audits when certifying.

#584 afranchuk closed 6 months ago
1
Prune non-importable audits.

#583 afranchuk closed 7 months ago
0
allow setting git diff command

#582 cemoktra closed 7 months ago
0
Add --cargo-arg option for arguments to pass through to cargo

#581 danakj closed 7 months ago
5
Mechanism for automatically pruning `importable = false` audits

#580 mystor closed 6 months ago
2
`cargo vet check` only checks target-specific dependencies if `build.target` is used

#579 Nemo157 opened 8 months ago
1
Calling source graph with `?visible=1000000` ends in 500

#578 cemoktra closed 5 months ago
9
Bump toml_edit from 0.14.4 to 0.21.0

#577 dependabot[bot] opened 8 months ago
0
Bump toml from 0.5.9 to 0.8.8

#576 dependabot[bot] opened 8 months ago
0
Bump libc from 0.2.146 to 0.2.150

#575 dependabot[bot] opened 8 months ago
0
Bump toml from 0.5.9 to 0.8.6

#574 dependabot[bot] closed 8 months ago
1
Bump toml_edit from 0.14.4 to 0.20.7

#573 dependabot[bot] closed 8 months ago
1
Bump futures-util from 0.3.21 to 0.3.29

#572 dependabot[bot] opened 8 months ago
0
Bump toml from 0.5.9 to 0.8.5

#571 dependabot[bot] closed 8 months ago
1
Bump toml_edit from 0.14.4 to 0.20.5

#570 dependabot[bot] closed 8 months ago
1
Bump toml_edit from 0.14.4 to 0.20.4

#569 dependabot[bot] closed 8 months ago
1
Bump toml from 0.5.9 to 0.8.4

#568 dependabot[bot] closed 8 months ago
1