TL;DR — Quick Summary

cargo-audit scans your Cargo.lock for crates with known security vulnerabilities from the RustSec advisory database.

cargo-audit scans your Rust dependencies for known security vulnerabilities. Essential for CI/CD.

Installation

# Install
cargo install cargo-audit

# Update advisory database
cargo audit fetch

Usage

# Scan for vulnerabilities
cargo audit

# Auto-fix by updating Cargo.lock
cargo audit fix

# JSON output for CI
cargo audit --json

# Ignore specific advisory
cargo audit --ignore RUSTSEC-2023-0001

# Check specific Cargo.lock
cargo audit -f path/to/Cargo.lock

CI Integration

# GitHub Actions
- name: Security audit
  run: |
    cargo install cargo-audit
    cargo audit

Summary

  • cargo-audit: security scanner for Rust dependencies
  • Cross-references Cargo.lock against RustSec advisory database
  • Auto-fix with cargo audit fix
  • JSON output for CI/CD automation
  • Essential for supply chain security