mozilla / cargo-vet

supply-chain security for Rust
Apache License 2.0
654 stars 44 forks source link

`cargo vet` should respect `http.cainfo` in Cargo config #612

Open ranger-ross opened 4 months ago

ranger-ross commented 4 months ago

When fetching audit imports I think the reqwest client should also use the http.cainfo if set. This would be useful as sometimes various security software deployed by companies will use their own CA.

I would be happy to open a PR if you are up for it.