code.cargo-auditcargo-audit (Rust advisories)
Checks Cargo.lock against the RustSec advisory database with cargo-audit. Reads the lockfile only; nothing is compiled or fetched from the project.
- Engine
- Wrapped scanner
- Wraps
cargo-audit- Targets
- Codebase
- Areas
- Supply chain, Security
- Runs
- By default, when the target applies
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only code.cargo-auditWraps cargo-audit. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.