Tag

cargo-deny

2 posts

Cargo Audit and Cargo Deny for Dependency Safety Explained

cargo-audit checks Cargo.lock against the RustSec advisory database; cargo-deny adds license, source and duplicate-version policy. Learn what each checks, how to run them in CI and how to triage a hit.

6 min read

Security

Checking Licenses and Bans With Cargo Deny Config Explained

cargo-deny checks advisories, licenses, banned crates and registry sources from one deny.toml. See a working configuration, how to read failures and how to add exceptions with a reason.

2 min read