A capability-creep triage gate for Rust dependency PRs: diffs v0-demangled symbols, inspects build.rs/proc-macros, checks provenance & advisories, with a review ratchet you can block merges on.

cargo dependency-management devsecops github-action github-actions rust rustlang sast security software-supply-chain supply-chain-security
5 Open Issues Need Help Last updated: Jul 19, 2026

Open Issues Need Help

View All on GitHub
enhancement help wanted

A capability-creep triage gate for Rust dependency PRs: diffs v0-demangled symbols, inspects build.rs/proc-macros, checks provenance & advisories, with a review ratchet you can block merges on.

Shell
#cargo#dependency-management#devsecops#github-action#github-actions#rust#rustlang#sast#security#software-supply-chain#supply-chain-security

A capability-creep triage gate for Rust dependency PRs: diffs v0-demangled symbols, inspects build.rs/proc-macros, checks provenance & advisories, with a review ratchet you can block merges on.

Shell
#cargo#dependency-management#devsecops#github-action#github-actions#rust#rustlang#sast#security#software-supply-chain#supply-chain-security

A capability-creep triage gate for Rust dependency PRs: diffs v0-demangled symbols, inspects build.rs/proc-macros, checks provenance & advisories, with a review ratchet you can block merges on.

Shell
#cargo#dependency-management#devsecops#github-action#github-actions#rust#rustlang#sast#security#software-supply-chain#supply-chain-security

A capability-creep triage gate for Rust dependency PRs: diffs v0-demangled symbols, inspects build.rs/proc-macros, checks provenance & advisories, with a review ratchet you can block merges on.

Shell
#cargo#dependency-management#devsecops#github-action#github-actions#rust#rustlang#sast#security#software-supply-chain#supply-chain-security

A capability-creep triage gate for Rust dependency PRs: diffs v0-demangled symbols, inspects build.rs/proc-macros, checks provenance & advisories, with a review ratchet you can block merges on.

Shell
#cargo#dependency-management#devsecops#github-action#github-actions#rust#rustlang#sast#security#software-supply-chain#supply-chain-security