cargo-crev

cargo-crev copied to clipboard

Barrier of entry

4

Hey there! I've been wanting to step up my Rust security game for ages now. Therefore, I just decided to install `cargo-crev`, but I was immediately reminded as to why...

LeCyberDucky

* Which version are you using (eg. `cargo crev --version`): `0.23.1`, `0.23.2` * How did you install `crev` (git?, cargo?, your distribution?): nix * What OS/platform are you running on:...

matthiasbeyer

Tutorial command abbreviation error 'c v' for 'crate verify'

4

Was following the [getting_started guide](https://github.com/crev-dev/cargo-crev/blob/master/cargo-crev/src/doc/getting_started.md) > Note: You can abbreviate most cargo-crev subcommands. For example: cargo crev c v. but got the following error ``` > $RUST_BACKTRACE=1; cargo crev c...

eugenesvk

Denoise show-all output

1

Currently the detailed output of `cargo crev v --show-all` is too noisy mostly because it includes many unneeded numbers due to e.g. unnecessary precision (`121015` is less informative than `.1m`)...

eugenesvk

Discuss and implement PGP support.

10

I am a heavy GPG user, and I belive it's a PITA for a mass audience. But it's almost the only game in town for hardware keys support, so security-minded...

dpc

Accidental changes during review

6

I'm a bit afraid to do reviews using `cargo crev crate goto` because I might accidentally change files under `~/.cargo/registry/src` and thus corrupt local builds. Wouldn't it be better to...

stefankreutz

Make trust graph consider paths (aka flow).

13

This is related to #44 . Right now WoT graph is build by just a cost-bounded flooding of a graph. This makes it possible for anyone to create a new...

dpc

When running `cargo crev update`, there are multiple repo URLs that are dead: ``` $ cargo crev update ... ERROR: Error: Failed to fetch https://github.com/vctibor/crev-proofs: remote authentication required but no...

dbrgn

Verify/review git dependencies

1

I added a git dependency to one of my projects: ``` wasm-dwarf = { git = "https://github.com/yurydelendik/wasm-dwarf", rev = "d5cd83df84d6709c079cf540f1217e559c47d66a" } ``` But it doesn't show up in `cargo crev...

MaulingMonkey

`trust find`, like `proof find` but for trust declarations

1

I'm running cargo-crev 0.17, installed via `cargo install`, on Debian Bullseye. A user I trust on a "medium" level disappeared from `cargo crev id query trusted`. (I initially attributed that...

Minoru