mirror of
https://github.com/imjasonh/rustvulncheck
synced 2026-07-08 04:08:07 +00:00
Three improvements to the symbol enrichment pipeline: 1. Prepend package name as crate prefix for non-workspace repos, so functions in src/lib.rs get properly qualified names (e.g., "base64::encode_config" instead of bare "encode_config"). 2. Filter files to target crate in workspace repos, preventing symbols from sibling crates from leaking in (e.g., RUSTSEC-2024-0431 for "xous" no longer pulls in symbols from unrelated services/). 3. Deduplicate symbols by function name with priority ordering (Deleted > Modified > Added), collapsing duplicates from multiple trait impls (e.g., four "Value::from" entries into one). https://claude.ai/code/session_01XbCbPY7bkQmWaGLYkv1qTu |
||
|---|---|---|
| .. | ||
| advisory.rs | ||
| analyzer.rs | ||
| ast_differ.rs | ||
| db.rs | ||
| diff_analyzer.rs | ||
| github.rs | ||
| lockfile.rs | ||
| main.rs | ||
| scanner.rs | ||
| type_tracker.rs | ||