Rust

Rust package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence License Dependencies Package Manager Claims
Depth Edges Kinds Files Digests Integrity Hash
cargo-auditable-binary-cataloger
application/x-executable, application/x-mach-binary, application/x-elf, application/x-sharedlib, application/vnd.microsoft.portable-executable, application/x-executable (mimetype)
transitive complete runtime
rust-cargo-lock-cataloger
Cargo.lock
transitive complete runtime, dev, build

Vulnerability scanning

Data Source Disclosures Fixes Track by
Source
Package
Affected Date Versions Date
GitHub Security Advisories (GHSA)
National Vulnerability Database (NVD)
Grype Configuration
Configuration Key Description
match.rust.using-cpes Use CPE package identifiers to find vulnerabilities

Next steps

Last modified October 23, 2025: fix section ref (9417a27)