Skip to content

Commit dfa6d42

Browse files
0323pin0323pin
committed
security/cargo-auditable: import package
Know the exact crate versions used to build your Rust executable. Audit binaries for known bugs or security vulnerabilities in production, at scale, with zero bookkeeping. This works by embedding data about the dependency tree in JSON format into a dedicated linker section of the compiled executable.
1 parent 86a5ea4 commit dfa6d42

5 files changed

Lines changed: 423 additions & 0 deletions

File tree

‎security/cargo-auditable/DESCR‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
Know the exact crate versions used to build your Rust executable. Audit binaries
2+
for known bugs or security vulnerabilities in production, at scale, with zero
3+
bookkeeping.
4+
5+
This works by embedding data about the dependency tree in JSON format into a
6+
dedicated linker section of the compiled executable.

‎security/cargo-auditable/Makefile‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
# $NetBSD: Makefile,v 1.1 2026/03/10 16:29:34 pin Exp $
2+
3+
DISTNAME= cargo-auditable-0.7.4
4+
CATEGORIES= security
5+
MASTER_SITES= ${MASTER_SITE_GITHUB:=rust-secure-code/}
6+
GITHUB_TAG= v${PKGVERSION_NOREV}
7+
8+
MAINTAINER= pkgsrc-users@NetBSD.org
9+
HOMEPAGE= https://github.com/rust-secure-code/cargo-auditable/
10+
COMMENT= Make production Rust binaries auditable
11+
LICENSE= apache-2.0 OR mit
12+
13+
.include "cargo-depends.mk"
14+
15+
#RUST_REQ= 1.91.1
16+
#Upstream does not state the required MSRV.
17+
#This package is confirmed to build with Rust 1.91.0 and Rust 1.94.0 on amd64
18+
INSTALLATION_DIRS= bin ${PKGMANDIR}/man1
19+
20+
do-install:
21+
${INSTALL_PROGRAM} ${WRKSRC}/target/release/cargo-auditable \
22+
${DESTDIR}${PREFIX}/bin
23+
${INSTALL_MAN} ${WRKSRC}/cargo-auditable/cargo-auditable.1 \
24+
${DESTDIR}${PREFIX}/${PKGMANDIR}/man1/cargo-auditable.1
25+
26+
.include "../../lang/rust/cargo.mk"
27+
.include "../../mk/bsd.pkg.mk"

‎security/cargo-auditable/PLIST‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
@comment $NetBSD: PLIST,v 1.1 2026/03/10 16:29:34 pin Exp $
2+
bin/cargo-auditable
3+
man/man1/cargo-auditable.1

‎security/cargo-auditable/cargo-depends.mk‎

Lines changed: 97 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,97 @@
1+
# $NetBSD: cargo-depends.mk,v 1.1 2026/03/10 16:29:34 pin Exp $
2+
3+
CARGO_CRATE_DEPENDS+= adler2-2.0.1
4+
CARGO_CRATE_DEPENDS+= aho-corasick-1.1.4
5+
CARGO_CRATE_DEPENDS+= autocfg-1.5.0
6+
CARGO_CRATE_DEPENDS+= base64-0.21.7
7+
CARGO_CRATE_DEPENDS+= binfarce-0.2.1
8+
CARGO_CRATE_DEPENDS+= bitflags-1.3.2
9+
CARGO_CRATE_DEPENDS+= bitflags-2.10.0
10+
CARGO_CRATE_DEPENDS+= bumpalo-3.19.0
11+
CARGO_CRATE_DEPENDS+= byteorder-0.5.3
12+
CARGO_CRATE_DEPENDS+= camino-1.2.1
13+
CARGO_CRATE_DEPENDS+= cargo-platform-0.3.1
14+
CARGO_CRATE_DEPENDS+= cargo_metadata-0.23.0
15+
CARGO_CRATE_DEPENDS+= cfg-if-1.0.4
16+
CARGO_CRATE_DEPENDS+= crc32fast-1.5.0
17+
CARGO_CRATE_DEPENDS+= cyclonedx-bom-0.8.0
18+
CARGO_CRATE_DEPENDS+= cyclonedx-bom-macros-0.1.0
19+
CARGO_CRATE_DEPENDS+= deranged-0.5.5
20+
CARGO_CRATE_DEPENDS+= dyn-clone-1.0.20
21+
CARGO_CRATE_DEPENDS+= env_home-0.1.0
22+
CARGO_CRATE_DEPENDS+= equivalent-1.0.2
23+
CARGO_CRATE_DEPENDS+= errno-0.3.14
24+
CARGO_CRATE_DEPENDS+= fluent-uri-0.1.4
25+
CARGO_CRATE_DEPENDS+= foldhash-0.1.5
26+
CARGO_CRATE_DEPENDS+= getrandom-0.3.4
27+
CARGO_CRATE_DEPENDS+= hashbrown-0.15.5
28+
CARGO_CRATE_DEPENDS+= hashbrown-0.16.0
29+
CARGO_CRATE_DEPENDS+= heck-0.5.0
30+
CARGO_CRATE_DEPENDS+= hex-0.4.3
31+
CARGO_CRATE_DEPENDS+= indexmap-2.12.0
32+
CARGO_CRATE_DEPENDS+= itoa-1.0.15
33+
CARGO_CRATE_DEPENDS+= js-sys-0.3.82
34+
CARGO_CRATE_DEPENDS+= leb128-0.2.5
35+
CARGO_CRATE_DEPENDS+= libc-0.2.177
36+
CARGO_CRATE_DEPENDS+= linux-raw-sys-0.11.0
37+
CARGO_CRATE_DEPENDS+= memchr-2.7.6
38+
CARGO_CRATE_DEPENDS+= miniz_oxide-0.8.9
39+
CARGO_CRATE_DEPENDS+= num-conv-0.2.0
40+
CARGO_CRATE_DEPENDS+= num-traits-0.2.19
41+
CARGO_CRATE_DEPENDS+= object-0.37.3
42+
CARGO_CRATE_DEPENDS+= once_cell-1.21.3
43+
CARGO_CRATE_DEPENDS+= ordered-float-4.6.0
44+
CARGO_CRATE_DEPENDS+= percent-encoding-2.3.2
45+
CARGO_CRATE_DEPENDS+= pico-args-0.5.0
46+
CARGO_CRATE_DEPENDS+= powerfmt-0.2.0
47+
CARGO_CRATE_DEPENDS+= proc-macro2-1.0.103
48+
CARGO_CRATE_DEPENDS+= purl-0.1.6
49+
CARGO_CRATE_DEPENDS+= quote-1.0.42
50+
CARGO_CRATE_DEPENDS+= r-efi-5.3.0
51+
CARGO_CRATE_DEPENDS+= regex-1.12.2
52+
CARGO_CRATE_DEPENDS+= regex-automata-0.4.13
53+
CARGO_CRATE_DEPENDS+= regex-syntax-0.8.8
54+
CARGO_CRATE_DEPENDS+= rustix-1.1.2
55+
CARGO_CRATE_DEPENDS+= rustversion-1.0.22
56+
CARGO_CRATE_DEPENDS+= ryu-1.0.20
57+
CARGO_CRATE_DEPENDS+= schemars-0.8.22
58+
CARGO_CRATE_DEPENDS+= schemars_derive-0.8.22
59+
CARGO_CRATE_DEPENDS+= semver-1.0.27
60+
CARGO_CRATE_DEPENDS+= serde-1.0.228
61+
CARGO_CRATE_DEPENDS+= serde_core-1.0.228
62+
CARGO_CRATE_DEPENDS+= serde_derive-1.0.228
63+
CARGO_CRATE_DEPENDS+= serde_derive_internals-0.29.1
64+
CARGO_CRATE_DEPENDS+= serde_json-1.0.145
65+
CARGO_CRATE_DEPENDS+= serde_spanned-0.6.9
66+
CARGO_CRATE_DEPENDS+= smallvec-1.15.1
67+
CARGO_CRATE_DEPENDS+= spdx-0.10.9
68+
CARGO_CRATE_DEPENDS+= strum-0.26.3
69+
CARGO_CRATE_DEPENDS+= strum_macros-0.26.4
70+
CARGO_CRATE_DEPENDS+= syn-2.0.109
71+
CARGO_CRATE_DEPENDS+= thiserror-1.0.69
72+
CARGO_CRATE_DEPENDS+= thiserror-2.0.17
73+
CARGO_CRATE_DEPENDS+= thiserror-impl-1.0.69
74+
CARGO_CRATE_DEPENDS+= thiserror-impl-2.0.17
75+
CARGO_CRATE_DEPENDS+= time-0.3.47
76+
CARGO_CRATE_DEPENDS+= time-core-0.1.8
77+
CARGO_CRATE_DEPENDS+= time-macros-0.2.27
78+
CARGO_CRATE_DEPENDS+= toml-0.8.23
79+
CARGO_CRATE_DEPENDS+= toml_datetime-0.6.11
80+
CARGO_CRATE_DEPENDS+= toml_edit-0.22.27
81+
CARGO_CRATE_DEPENDS+= topological-sort-0.2.2
82+
CARGO_CRATE_DEPENDS+= unicode-ident-1.0.22
83+
CARGO_CRATE_DEPENDS+= uuid-1.18.1
84+
CARGO_CRATE_DEPENDS+= wasip2-1.0.1+wasi-0.2.4
85+
CARGO_CRATE_DEPENDS+= wasm-bindgen-0.2.105
86+
CARGO_CRATE_DEPENDS+= wasm-bindgen-macro-0.2.105
87+
CARGO_CRATE_DEPENDS+= wasm-bindgen-macro-support-0.2.105
88+
CARGO_CRATE_DEPENDS+= wasm-bindgen-shared-0.2.105
89+
CARGO_CRATE_DEPENDS+= wasm-gen-0.1.4
90+
CARGO_CRATE_DEPENDS+= wasmparser-0.207.0
91+
CARGO_CRATE_DEPENDS+= which-8.0.0
92+
CARGO_CRATE_DEPENDS+= windows-link-0.2.1
93+
CARGO_CRATE_DEPENDS+= windows-sys-0.61.2
94+
CARGO_CRATE_DEPENDS+= winnow-0.7.13
95+
CARGO_CRATE_DEPENDS+= winsafe-0.0.19
96+
CARGO_CRATE_DEPENDS+= wit-bindgen-0.46.0
97+
CARGO_CRATE_DEPENDS+= xml-rs-0.8.28

0 commit comments

Comments
 (0)