rust-audit
Embed dependency information into Rust binaries for vulnerability auditing in production.
What is rust-audit?
cargo-auditable is a Cargo subcommand that embeds a JSON-formatted dependency tree into compiled Rust executables. It enables post-build auditing for known security vulnerabilities, allowing teams to audit production binaries at scale without maintaining separate dependency manifests, which facilitates supply chain security.
Rust developers and DevOps/security engineers who need to audit Rust binaries in production environments for security vulnerabilities. It is particularly relevant for teams distributing Rust applications via Linux distributions, container images, or release artifacts.
Developers choose cargo-auditable because it provides a minimal-overhead solution (adding less than 4kB to binary size) for embedding dependency data directly into binaries, enabling vulnerability scanning with tools like cargo-audit, Trivy, and Grype without extra bookkeeping. Its interoperability and support across platforms (Linux, Windows, macOS, WebAssembly) make it a pragmatic tool for existing security workflows.
Overview
Make production Rust binaries auditable
Use Cases
Best For
- Auditing Rust binaries in production environments for known security vulnerabilities without access to source code or Cargo.lock files.
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
