Thursday, September 09, 2021

Re: [new] devel/cargo-audit a tool to check yer crates for security vulns!!

On 2021/09/09 13:19, Aaron Bieber wrote:
> Hi,
>
> Here is a port of cargo-audit:
> https://github.com/RustSec/rustsec/tree/main/cargo-audit
>
> This isn't the latest version because that fails to build:
> https://github.com/rustsec/rustsec/issues/429
>
> Unfortunately the program doesn't run unless you specify the full
> path. I tried creating a patch to fix it, but I can't make heads or
> tails of the code.
>
> Thanks to tb@ and semarie@ for pointers on the Makefile!
>
> Here is a git mirror as well:
> https://github.com/jasperla/openbsd-wip/tree/master/devel/cargo-audit
>
> OK? Cluesticks?

It is not particularly pleasant, but if you can't figure out where to
patch in the code itself to avoid the "lookup path to self" bit, you
could write a wrapper script to call it with full path instead.

No comments:

Post a Comment