package-analysis icon indicating copy to clipboard operation
package-analysis copied to clipboard

Hook up crates feed via cargo

Open tom--pollard opened this issue 4 years ago • 1 comments

Targeting a rust:minimal container for cargo builds of the given package tarballs for example

tom--pollard avatar Mar 24 '21 13:03 tom--pollard

The crates api exposes https://crates.io/api/v1/crates/$package_name/$package_version/download (values of which exist on the Package{} structs) which provides the given source tarball via wget, for example. This could then be extracted and installed with cargo build during the analysis phase under falco

tom--pollard avatar Mar 24 '21 15:03 tom--pollard

This is done.

#551 is logged to add import support.

calebbrown avatar Dec 21 '22 00:12 calebbrown