search

rust-lang / cargo

The Rust package manager
https://doc.rust-lang.org/cargo
Apache License 2.0
12.57k stars 2.38k forks source link

Add "cargo audit" #7678

Open trevordmiller opened 4 years ago

trevordmiller commented 4 years ago

Describe the problem you are trying to solve I read about cargo audit on the Rust blog, but it isn't in cargo --list.

Describe the solution you'd like Add cargo audit to cargo --list.

Notes Can cargo audit be installed with rustup like cargo fmt and cargo clippy etc.? I love cargo and feel having everything encapsulated / documented in the CLI tool would be helpful.

sfackler commented 4 years ago

Can cargo audit be installed with rustup like cargo fmt and cargo clippy etc.?

cargo install cargo-audit.

trevordmiller commented 4 years ago

@sfackler I mean would it make sense to include it with the rustup setup? I didn't manually install the fmt or clippy subcommands. Apologies if I'm misunderstanding something. I'm new to working in Rust :)

eutampieri commented 4 years ago

cargo install cargo-audit is not precompiled

epage commented 12 months ago

@trevordmiller is there a reason you closed this?

For now, I'm re-opening until there is more information as this seems like it'd be useful for us to consider and track.

trevordmiller commented 12 months ago

@epage I'm trying to clean up my open issues into those that are actionable for me. I also no longer use Rust. Feel free to create a separate issue. Thank you.

epage commented 12 months ago

Whether the issue is actionable for you or not, this is a valid issue against this project and it'd be better for us to not split its history across issues.

epage commented 5 months ago

Some considerations we should keep in mind when evaluating how to integrate security reporting into cargo: https://overreacted.io/npm-audit-broken-by-design/