imjasonh/rustvulncheck
1
0
Fork 0
mirror of https://github.com/imjasonh/rustvulncheck synced 2026-07-09 21:06:59 +00:00
Code Activity

Merge branch 'main' into claude/review-vuln-db-and-docs-RRsc6

Browse source
This commit is contained in:
Jason Hall 2026-03-25 11:18:13 -04:00 • committed by GitHub
commit 91cbbbdbb3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -32,8 +32,8 @@ This isn't perfect, of course -- if a fixed version `v1.2.4` included a hundred
### Status
The enriched database is currently being built, by periodically scraping some of RustSec's advisories and doing the diff analysis to determine affected symbols. When that's done, it would probably be useful for humans/agents to spot-check some and even manually tweak the findings. The idea isn't to replace the experts with good taste, it's to give them a leg up on the backlog.
The enriched database is available at [`./vuln_db.json`], and is continuously rebuilt by periodically scraping RustSec's advisories and doing the diff analysis to determine affected symbols. It would probably be useful for humans/agents to spot-check some and even manually tweak the findings. The idea isn't to replace the experts with good taste, it's to give them a leg up on the backlog.
The call analysis code could probably also be improved to both find more cases, and to filter out negatives better.
Ultimately I don't really even need this exact code to become The Thing, I just want The Thing to exist, and this was a useful experiment to see what it would take.
Ultimately I don't really even need this exact code to become The Thing, I just want The Thing to exist, and this was a useful experiment to see what it would take. If this inspires you to do better, _please do_!

1
vuln_db.json
View file

@ -1,5 +1,6 @@
{
"generated_at": "unix:1774451828",
"generated_at": "unix:1774450355",
"entries": [
{
"advisory_id": "RUSTSEC-2026-0037",