cargo-auditable
cargo-auditable copied to clipboard
Add integration tests for RustSec interop
It would be nice to verify that the recovered information is indeed read correctly by cargo auditable
and/or the underlying rustsec
crate, and that it does indeed report vulnerable versions when they're present.
There is a test advisory specifically for this purpose: https://github.com/rustsec/advisory-db/blob/main/crates/rustsec-example-crate/RUSTSEC-2019-0024.md
This is being added to the RustSec repo: https://github.com/rustsec/rustsec/pull/635
Merged into RustSec repo with Linux targets.
If you have a Windows or Mac, we'd appreciate you contributing precompiled binaries for those platforms.