Introducing the Rust Safety Dance, a project by the Secure Code WG to audit and potentially eliminate usages of unsafe from core ecosystem (and other) crates:
github.com/rust-secure-co
Pinned Tweet
Follow
Rust Secure Code WG
@rustsecurecode
Official Twitter for the Rust Secure Code Working Group: making it easy to write secure code in Rust
github.com/rust-secure-co…Joined October 2018
Rust Secure Code WG’s Tweets
2
11
17
The Rust team was notified of a vulnerability affecting crates.io API tokens generation and storage, and out of aboundance of precaution we revoked all existing tokens. Learn more on the advisory:
9
141
294
1
5
13
cargo tools that may or may not be useful when auditing code: audit, clippy, geiger, outdated
others?
4
3
15
6
16
`cargo audit fix` can now (sometimes) fix your vulnerable dependency requirements automatically!
Quote Tweet
cargo-audit v0.11: Introducing the `fix` feature, yanked crate detection, and more /cc @rustlang
blog.rust-lang.org/inside-rust/20
3
15
Keeping projects secure with cargo-audit 0.9: dependency trees, core advisories, unmaintained crates - Inside Rust blog
12
32
Interested in making it easy to reproduce builds of apps/libraries or build-time sandboxing for Cargo? We're kicking off a couple of new crates and looking for interested contributors!
- cargo-repro: github.com/rust-secure-co
- cargo-sandbox:
1
7
23
6
25
1
2
13
Or vote via Twitter!
Quote Tweet
Give us your opinion! Which should be the logo for the @rustlang Secure Code Working Group? Vote here or on GitHub: github.com/rust-secure-co
Option A: bit.ly/2CeAqBt
Option B: bit.ly/2HeYAjm
@rustsecurecode #rust #rustlang
Show this poll
1
1
Show this thread
Vote for the working group's logo! See the linked GitHub issue to vote /cc
github.com/rust-secure-co
5
12
37
Show this thread
10
13
3
10
Check out the Rust Secure Code WG's #Rust2019 blog post! We're trying to make it easy to write secure code in Rust
2
27
58
A proposal for a minimum viable integration between and 's cargo utility: internals.rust-lang.org/t/pre-rfc-revi #rust2019
1
8
25
Introducing the Rust Secure Code Working Group! Check out our GitHub at github.com/rust-secure-co or find us on the "secure-code-wg" channel on the rust-lang Zulip! rust-lang.zulipchat.com/#narrow/stream
9
21