rustsec

rustsec copied to clipboard

Bumps [regex](https://github.com/rust-lang/regex) from 1.11.0 to 1.11.1. Changelog Sourced from regex's changelog. 1.11.1 (2024-10-24) This is a new patch release of regex that fixes compilation on nightly Rust when the unstable...

dependabot[bot]

hamirmahal

Bumps [display-error-chain](https://github.com/mexus/display-error-chain) from 0.2.1 to 0.2.2. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Don't require cloning advisory-db over HTTPS

3

The `audit.toml` allows specifying the URL of the advisory-db repository. ```toml [database] url = "https://.../advisory-db.git" ``` Attempting to use a URL that doesn't start with `https`, e.g. `user@.../advisory-db.git` for cloning...

wojciech-graj

Enable Link-Time Optimization (LTO) for Cargo extensions

1

Hi! I noticed that in the `Cargo.toml` files for Cargo extensions Link-Time Optimization (LTO) is not enabled. I suggest switching it on since it will reduce the binary size (always...

zamazan4ik

0.20.1 release did not get completed

6

👋 looks like 0.20.1 release was not completed, ie did not get marked as latest release. Raise this issue for some awareness. Thanks! relates to https://github.com/Homebrew/homebrew-core/pull/181404

chenrui333

cargo audit crashes with "invalid Cargo.lock dependency tree: ..."

6

cargo-audit 0.20.0 crashes when run on the master branch of the Nix repository. The problem seems to be that the master branch uses a git dependency, and specifies a git...

asomers

Cargo audit failure to fetch database: failed to update references

2

I preformed the same modifications as done [in this issue](https://github.com/rustsec/rustsec/issues/1029#issuecomment-1814843858) to get the full trace. ``` C:\Users\user\Desktop\rust_projects\project>cargo audit Fetching advisory database from `https://github.com/RustSec/advisory-db.git` error: couldn't fetch advisory database: git operation...

MeGaGiGaGon

Right now it doesn't: https://github.com/rustsec/rustsec/blob/5c1ea055155118f2aca7e7fdf4b46921ba117c7c/cargo-audit/src/commands/audit/fix.rs#L48-L51

Shnatsel

CVSS 2.0

1

We are working on a Rust implementation of the CSAF standard (see https://github.com/csaf-poc/csaf-rust). In order to fully comply with the CSAF standard, we need to parse CVSS 2.0, 3.0/3.1 and...

oxisto