1
0
Fork 0
mirror of https://github.com/imjasonh/rustvulncheck synced 2026-07-09 12:56:54 +00:00
rustvulncheck/tests
Claude 430816c717
Add Phase 1: Offline Database Enrichment pipeline
Build the first phase of cargo deep-audit - a reachability-based vulnerability
scanner for Rust. This pipeline:

- Clones/caches the RustSec advisory-db and parses TOML advisory files
- Extracts crate names, patched versions, CVE/RUSTSEC IDs, and GitHub refs
- Fetches patch diffs via GitHub API (PRs resolve to merge commits)
- Analyzes unified diffs to extract modified Rust function signatures
- Outputs an enriched JSON database mapping advisory IDs to function signatures

Modules:
- advisory.rs: TOML parser with GitHub reference extraction
- github.rs: GitHub API client for commit/PR diffs
- diff_analyzer.rs: Unified diff parser extracting fn signatures from hunks
- db.rs: JSON output database structure
- main.rs: CLI orchestrator with clap

https://claude.ai/code/session_01AeNG3herWfKhos9uZVUY5d
2026-03-25 01:28:25 +00:00
..
fixtures/crates Add Phase 1: Offline Database Enrichment pipeline 2026-03-25 01:28:25 +00:00
integration_test.rs Add Phase 1: Offline Database Enrichment pipeline 2026-03-25 01:28:25 +00:00