rustsec

🛡️ GitHub Action for security audits

Where Rust's safety guarantees stop, and how to secure Rust code, dependencies, builds and services. Every claim sourced, every example compiled in CI.

Audit Rust Dependencies using the RustSec Advisory DB

Ranked dependency health report for Rust, combines RustSec advisories, version lag, and maintenance age, weighted by how much of your dependency graph relies on each crate.

Fleet-wide dependency security audit across 12 ecosystems from one CLI: deduplicated and ranked, with blast-radius analysis, a batched remediation queue, and sound Rust reachability.

A Rust audit that tells you what it can prove — and what it can't.

A Rust CLI that finds the quiet crates in your Cargo.lock, writes every fact itself, and lets a local Gemma add one checked line of remembrance.

Versioned Rust knowledge base for AI coding agents: Claude Code plugin + MCP server with curated guidance, docs.rs API docs, clippy lints, RustSec advisories and drift detection.

Rust dependency CVE scanner with private on-device browser scans, a portable Windows desktop, searchable findings, and reports.

Checks every Cargo.lock in a repo for RustSec advisories with cargo-deny, and keeps one GitHub issue current with what it finds. Ships as a cargo subcommand, a GitHub Action, and a pre-commit hook from one release.

A Cargo subcommand for Rust supply-chain hardening: one policy gate for what enters your dependency graph.