From b0bc62bdd506596e77d63c9d45c8f744c95f2dad Mon Sep 17 00:00:00 2001 From: Veetaha Date: Sat, 2 May 2020 20:27:32 +0300 Subject: [PATCH] Add `cargo-deny` to the list RustSec clients `cargo-deny` is an awesome tool, it seems to be the superset of `cargo-audit`. I think it is reasonable to mention it here along with `cargo-audit`. cc @Jake-Shadle --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 9da1d59..5f1220b 100644 --- a/README.md +++ b/README.md @@ -11,6 +11,7 @@ Advisory metadata is stored in [TOML] format (see below). The following tools consume the data and can be used for auditing and reporting (send PRs to add yours): * [cargo-audit]: Audit `Cargo.lock` files for crates with security vulnerabilities +* [cargo-deny]: Audit `Cargo.lock` files for crates with security vulnerabilities, limit the usage of particular dependencies, their licenses, sources to download from, detect multiple versions of same packages in the dependency tree and more. ## Reporting Vulnerabilities @@ -125,4 +126,5 @@ All content in this repository is placed in the public domain. [TOML]: https://github.com/toml-lang/toml [cargo-audit]: https://github.com/rustsec/cargo-audit +[cargo-deny]: https://github.com/EmbarkStudios/cargo-deny [CONTRIBUTING.md]: https://github.com/RustSec/advisory-db/blob/master/CONTRIBUTING.md