poglesbyg/capscan audit
Audit a Cargo.lock against latest published crate versions and fail CI when a dependency would gain new unsafe/FFI/process/network/build-script capabilities.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| lockfile | Path to the Cargo.lock to audit. | no | Cargo.lock |
| fail-on | Minimum severity that fails the action: 'high', 'medium', or 'none' (report only, never fail). | no | medium |
| version | capscan version to install (passed to `cargo install capscan --version`). Empty installs the latest release. | no | "" |
Outputs
| name | description |
|---|---|
| audit-exit-code | capscan's own exit code: 2 = new high severity signal, 1 = new medium severity signal, 0 = none. |