rustsec/rustsec issues and pull requests

#1248 - Don't require cloning advisory-db over HTTPS

Issue - State: open - Opened by wojciech-graj 10 days ago - 1 comment

#1247 - Enable Link-Time Optimization (LTO) for Cargo extensions

Issue - State: open - Opened by zamazan4ik 11 days ago - 1 comment

#1246 - build(deps): bump xml-rs from 0.8.21 to 0.8.22

Pull Request - State: open - Opened by dependabot[bot] 19 days ago
Labels: dependencies, rust

#1245 - build(deps): bump atom_syndication from 0.12.3 to 0.12.4

Pull Request - State: open - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, rust

#1244 - build(deps): bump tame-index from 0.13.1 to 0.13.2

Pull Request - State: open - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, rust

#1243 - build(deps): bump display-error-chain from 0.2.0 to 0.2.1

Pull Request - State: open - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, rust

#1242 - 0.20.1 release did not get completed

Issue - State: open - Opened by chenrui333 about 1 month ago - 6 comments

#1241 - cargo audit crashes with "invalid Cargo.lock dependency tree: ..."

Issue - State: open - Opened by asomers about 1 month ago - 6 comments

#1240 - The latest stable version of cargo-audit does not build with the latest stable compiler

Issue - State: closed - Opened by kornelski about 1 month ago - 4 comments

#1239 - cargo-audit: make `cargo-lock` a hard dependency

Pull Request - State: closed - Opened by tarcieri about 2 months ago

#1238 - cargo-audit: Build fails with `--no-default-features`

Issue - State: closed - Opened by traviscross about 2 months ago

#1236 - build(deps): bump xml-rs from 0.8.20 to 0.8.21

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, rust

#1235 - build(deps): bump tame-index from 0.13.0 to 0.13.1

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, rust

#1234 - build(deps): bump regex from 1.10.5 to 1.10.6

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, rust

#1225 - Bump `toml` to v0.8

Pull Request - State: closed - Opened by tarcieri 2 months ago - 4 comments

#1209 - chore: leverage workspace inheritance

Pull Request - State: open - Opened by weihanglo 3 months ago - 5 comments

#1208 - build(deps): bump tame-index from 0.12.0 to 0.12.1

Pull Request - State: open - Opened by dependabot[bot] 3 months ago
Labels: dependencies, rust

#1207 - feat(cli): Honor CARGO_TERM_COLOR for cargo-audit

Pull Request - State: open - Opened by gilescope 3 months ago - 1 comment

#1206 - feat(cargo-lock): support lockfile v4

Pull Request - State: open - Opened by weihanglo 3 months ago - 10 comments

#1205 - chore(cargo-lock): bump to [email protected]

Pull Request - State: open - Opened by weihanglo 3 months ago - 10 comments

#1204 - chore: regenerate platform support and bump to [email protected]

Pull Request - State: closed - Opened by weihanglo 3 months ago - 1 comment

#1203 - build(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6

Pull Request - State: open - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1202 - [FEATURE REQUEST] Subcommand to fetch advisory-db without running tests

Issue - State: closed - Opened by xMAC94x 3 months ago - 1 comment

#1201 - build(deps): bump url from 2.5.0 to 2.5.2

Pull Request - State: open - Opened by dependabot[bot] 3 months ago
Labels: dependencies, rust

#1200 - build(deps): bump url from 2.5.0 to 2.5.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, rust

#1199 - build(deps): bump regex from 1.10.4 to 1.10.5

Pull Request - State: open - Opened by dependabot[bot] 4 months ago
Labels: dependencies, rust

#1198 - feat: support temporal score and Environmental Score

Pull Request - State: open - Opened by bxf12315 4 months ago - 21 comments

#1197 - deps: bump libc from 0.2.153 to 0.2.155

Pull Request - State: open - Opened by znley 4 months ago

#1196 - build(deps): bump tame-index from 0.11.1 to 0.12.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, rust

#1195 - update `gix` to v0.63 for security fixes

Pull Request - State: closed - Opened by Byron 4 months ago - 3 comments

#1194 - build(deps): bump gix from 0.62.0 to 0.63.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 3 comments
Labels: dependencies, rust

#1193 - build(deps): bump comrak from 0.21.0 to 0.24.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, rust

#1192 - build(deps): bump softprops/action-gh-release from 4634c16e79c963813287e889244c50009e7f0981 to 69320dbe05506a9a39fc8ae11030b214ec2d1f87

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#1191 - build(deps): bump atom_syndication from 0.12.2 to 0.12.3

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, rust

#1190 - build(deps): bump rust-embed from 8.3.0 to 8.4.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, rust

#1189 - build(deps): bump petgraph from 0.6.4 to 0.6.5

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, rust

#1188 - Fix typo `then` -> `them` in index.html

Pull Request - State: closed - Opened by obi1kenobi 5 months ago

#1188 - Fix typo `then` -> `them` in index.html

Pull Request - State: closed - Opened by obi1kenobi 5 months ago

#1188 - Fix typo `then` -> `them` in index.html

Pull Request - State: closed - Opened by obi1kenobi 5 months ago

#1188 - Fix typo `then` -> `them` in index.html

Pull Request - State: closed - Opened by obi1kenobi 5 months ago

#1187 - build(deps): bump semver from 1.0.21 to 1.0.23

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, rust

#1187 - build(deps): bump semver from 1.0.21 to 1.0.23

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, rust

#1187 - build(deps): bump semver from 1.0.21 to 1.0.23

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, rust

#1186 - build(deps): bump softprops/action-gh-release from 4634c16e79c963813287e889244c50009e7f0981 to 3989e4b325fd35af0f19f42a37021d50b48b77e0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, github_actions

#1186 - build(deps): bump softprops/action-gh-release from 4634c16e79c963813287e889244c50009e7f0981 to 3989e4b325fd35af0f19f42a37021d50b48b77e0

Pull Request - State: open - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#1185 - Feature/multiple filters, rebased

Pull Request - State: closed - Opened by Shnatsel 5 months ago

#1185 - Feature/multiple filters, rebased

Pull Request - State: closed - Opened by Shnatsel 5 months ago

#1184 - false positive when local crate has the same name as one with an advisory

Issue - State: closed - Opened by wez 5 months ago - 1 comment

#1184 - false positive when local crate has the same name as one with an advisory

Issue - State: closed - Opened by wez 5 months ago - 1 comment

#1183 - build(deps): bump tame-index from 0.11.0 to 0.11.1

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, rust

#1182 - Support auditing WASM binaries

Pull Request - State: closed - Opened by Shnatsel 5 months ago

#1181 - Fix warnings added in Rust 1.78

Pull Request - State: closed - Opened by Shnatsel 5 months ago

#1180 - Idea: optional warning when --ignore flags are no longer necessary

Issue - State: open - Opened by Shnatsel 5 months ago
Labels: enhancement, cargo-audit crate

#1179 - Release `rustsec` v0.29.2

Pull Request - State: closed - Opened by Shnatsel 5 months ago

#1178 - build(deps): bump comrak from 0.21.0 to 0.23.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, rust

#1177 - CVSS links broken on https://rustsec.org/advisories/

Issue - State: open - Opened by ctz 5 months ago
Labels: bug, web

#1176 - build(deps): bump toml_edit from 0.22.6 to 0.22.12

Pull Request - State: open - Opened by dependabot[bot] 5 months ago
Labels: dependencies, rust

#1175 - fix cargo clippy warning and error

Pull Request - State: closed - Opened by rtczza 5 months ago - 1 comment

#1174 - cargo-audit: remove is-terminal dep

Pull Request - State: open - Opened by klensy 6 months ago - 1 comment

#1174 - cargo-audit: remove is-terminal dep; bump gix-* to 0.62

Pull Request - State: closed - Opened by klensy 6 months ago - 5 comments

#1173 - build(deps): bump gix from 0.61.0 to 0.62.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 3 comments
Labels: dependencies, rust

#1173 - build(deps): bump gix from 0.61.0 to 0.62.0

Pull Request - State: open - Opened by dependabot[bot] 6 months ago - 2 comments
Labels: dependencies, rust

#1172 - build(deps): bump chrono from 0.4.34 to 0.4.38

Pull Request - State: open - Opened by dependabot[bot] 6 months ago
Labels: dependencies, rust

#1172 - build(deps): bump chrono from 0.4.34 to 0.4.38

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, rust

#1171 - RUSTSEC-2024-0335: gix-transport indirect code execution via malicious username

Issue - State: closed - Opened by github-actions[bot] 6 months ago - 1 comment

#1171 - RUSTSEC-2024-0335: gix-transport indirect code execution via malicious username

Issue - State: open - Opened by github-actions[bot] 6 months ago

#1170 - build(deps): bump time from 0.3.34 to 0.3.36

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, rust

#1169 - build(deps): bump time from 0.3.34 to 0.3.35

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, rust

#1169 - build(deps): bump time from 0.3.34 to 0.3.35

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, rust

#1169 - build(deps): bump time from 0.3.34 to 0.3.35

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, rust

#1168 - serde-yaml is now deprecated

Issue - State: closed - Opened by dupgit 6 months ago - 4 comments

#1167 - Update gix and tame-index to fix CI

Pull Request - State: closed - Opened by Shnatsel 6 months ago

#1167 - Update gix and tame-index to fix CI

Pull Request - State: closed - Opened by Shnatsel 6 months ago

#1166 - build(deps): bump softprops/action-gh-release from 4634c16e79c963813287e889244c50009e7f0981 to 9b795e578288d5ff64564dfa7dd4cda7b04bb648

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, github_actions

#1166 - build(deps): bump softprops/action-gh-release from 4634c16e79c963813287e889244c50009e7f0981 to 9b795e578288d5ff64564dfa7dd4cda7b04bb648

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, github_actions

GitHub / rustsec/rustsec issues and pull requests