axodotdev / axodotdev/axoupdater

Cargo Audit in CI

Open
#249 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
31
Forks
13
PR merge metrics
No merged PRs in 30d

Description

Hi I am using `axoupdater` (thanks!) and since I run `cargo audit` in CI I was made aware of https://rustsec.org/advisories/RUSTSEC-2025-0004 because of your dependency on openssl.

![Image](https://github.com/user-attachments/assets/23347695-bce2-4513-bafc-c395ac31f9cd)

Of course it is just a matter of updating a dependency for you as well, but it might be worthwhile for you to run an audit job in CI such that you are made aware of these issues as soon as possible.

Contributor guide

Open the contributing guide

Research direction

Start by locating the repository's CI configuration and review how Rust dependencies are checked. Run cargo audit to reproduce the reported dependency advisory, then add a CI audit job that fails or reports on vulnerabilities; done means the check runs automatically for repository changes.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
ci-cd, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.