Rust Advisories Added to GitHub Advisory Database
GitHub has expanded its Advisory Database to include the Rust ecosystem, adding curated security advisories for Rust libraries to the platform. The database now covers eight language ecosystems: Composer (PHP), Go, Maven, npm, NuGet, pip, RubyGems, and Rust.
The addition means Rust developers can check for known security issues directly on GitHub, alongside their code, rather than consulting a separate database. GitHub notes this is an initial step, with Rust support for the dependency graph and Dependabot alerts listed as forthcoming work on its public roadmap.
Collaboration with RustSec
To build the Rust dataset, GitHub worked with RustSec, an independent organization that collects and standardizes security advisories for Rust libraries. RustSec's public database served as the starting point for GitHub's own Rust vulnerability data. GitHub says it will continue this collaboration by making its own Security Advisory data available in a consumable format to complement RustSec's database.
As of the announcement, GitHub has published 317 Rust Security Advisories, and expects the number to increase as more data is gathered from the community. Current Rust advisories can be browsed by selecting Rust in the left menu of the GitHub Advisory Database.
Open Data
The GitHub Advisory Database is an open database of security advisories, licensed under Creative Commons Attribution 4.0, making the vulnerability information freely usable anywhere.
