Rust - Cargo

See a breakdown of the file formats and features supported in Rust.

The support for this language is currently in beta. Vulnerability results may be less accurate than normal.

OpenText Core SCA now tracks Rust dependencies through Cargo, using its associated Cargo.lock files. This file is generated whenever one of the following commands is executed:

cargo build

cargo update

If the file is committed to the repository, it will be automatically scanned for dependencies when integrated with OpenText Core SCA CI/CD pipeline.

Supported file formats and features

Package manager	Supported file formats	Root dependencies	Indirect dependencies	Dependency trees	Security scanning	License scanning	Root fix	Pull Request	Reachability Analysis	High Performance Scan
Cargo	Cargo.lock									Yes*

*This is a native lock file format. Native lock file formats are the fastest formats to scan.