cargo-audit 0.22.2

Audit Cargo.lock for crates with security vulnerabilities
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

//! The `cargo audit bin` subcommand

use crate::{auditor::Auditor, prelude::*};
use clap::Parser;
use std::{path::PathBuf, process::exit};

#[cfg(feature = "binary-scanning")]
/// The `cargo audit` subcommand
#[derive(Command, Clone, Default, Debug, Parser)]
#[command()]
pub struct BinCommand {
    /// Maximum binary size in bytes to read
    #[arg(
        long = "max-binary-size",
        value_name = "BYTES",
        help = "Maximum binary size in bytes to read (default: 100MB; use 0 for unlimited)"
    )]
    max_binary_size: Option<u64>,

    /// Maximum audit data size in bytes to parse
    #[arg(
        long = "audit-data-size-limit",
        value_name = "BYTES",
        help = "Maximum audit data size in bytes to parse (default: 8MB)"
    )]
    audit_data_size_limit: Option<usize>,

    /// Paths to the binaries to be scanned
    #[arg(
        value_parser,
        required = true,
        help = "Paths to the binaries to be scanned"
    )]
    binary_paths: Vec<PathBuf>,
}

impl Runnable for BinCommand {
    fn run(&self) {
        let mut auditor = self.auditor();
        auditor.set_binary_scan_limits(self.max_binary_size, self.audit_data_size_limit);
        let report = auditor.audit_binaries(&self.binary_paths);
        if report.vulnerabilities_found {
            exit(1)
        } else if report.errors_encountered {
            exit(2)
        } else {
            exit(0)
        }
    }
}

impl BinCommand {
    /// Initialize `Auditor`
    pub fn auditor(&self) -> Auditor {
        Auditor::new(&APP.config())
    }
}