mozilla / cargo-vet

supply-chain security for Rust
Apache License 2.0
651 stars 43 forks source link

FYI: cargo-crev export tool #540

Open kornelski opened 12 months ago

kornelski commented 12 months ago

I wrote a tool that exports cargo-crev's review db as audits.toml:

https://github.com/crev-dev/cargo-crev/pull/643

I'm missing a way to uniquely identify a review, especially when it's going to appear in multiple places and get aggregated. I've fudged it with a pseudo-URL with crev's review digest.