monolith icon indicating copy to clipboard operation
monolith copied to clipboard

Enhancement: use cargo-auditable to add metadata to the binary about dependencies

Open cjrh opened this issue 1 year ago • 0 comments

Now that openssl is vendored following #401, it would be a good idea to inject dependency information into the executable during the build process:

https://github.com/rust-secure-code/cargo-auditable

Tools can scan all the binaries on a system to check specifically for statically-linked binaries that have reported vulnerabilities and dramatically speed up the process of finding, updating, rebuilding, and deploying such assets.

cjrh avatar Sep 03 '24 10:09 cjrh