Rust Vulnerability Checks

Tools for checking vulnerabilities in Rust code.


Cargo Audit

 1# Install
 2cargo install cargo-audit
 3
 4# Check vulnerabilities
 5cargo audit
 6
 7# Fix vulnerabilities
 8cargo audit fix
 9
10# JSON output
11cargo audit --json

Cargo Deny

 1# Install
 2cargo install cargo-deny
 3
 4# Initialize config
 5cargo deny init
 6
 7# Check all advisories
 8cargo deny check
 9
10# Check specific
11cargo deny check advisories
12cargo deny check licenses
13cargo deny check bans
14cargo deny check sources

Clippy (Linter)

1# Install
2rustup component add clippy
3
4# Run
5cargo clippy
6
7# Strict mode
8cargo clippy -- -D warnings

CI/CD Integration

 1# GitHub Actions
 2name: Security Scan
 3
 4on: [push, pull_request]
 5
 6jobs:
 7  security:
 8    runs-on: ubuntu-latest
 9    steps:
10      - uses: actions/checkout@v3
11      
12      - name: Install Rust
13        uses: actions-rs/toolchain@v1
14        with:
15          toolchain: stable
16          components: clippy
17      
18      - name: Run Clippy
19        run: cargo clippy -- -D warnings
20      
21      - name: Install cargo-audit
22        run: cargo install cargo-audit
23      
24      - name: Run cargo-audit
25        run: cargo audit
26      
27      - name: Install cargo-deny
28        run: cargo install cargo-deny
29      
30      - name: Run cargo-deny
31        run: cargo deny check

Related Snippets