Linux workstation

openSUSE Tumbleweed native package

cargo-auditable

A tool to embed auditing information in ELF sections of rust binaries

Packages / openSUSE Tumbleweed / Development/Languages/Rust / cargo-auditable

[Source: cargo-auditable]

Package: cargo-auditable (0.7.5~0-1.3)

External Resources:

Homepage: [github.com]

A tool to embed auditing information in ELF sections of rust binaries

Know the exact crate versions used to build your Rust executable. Audit binaries for known bugs or security vulnerabilities in production, at scale, with zero bookkeeping. This works by embedding data about the dependency tree in JSON format into a dedicated linker section of the compiled executable.

Other Packages Related to cargo-auditable:

  • dep: ld-linux-x86-64.so.2()(64bit)

    Package not available

  • dep: ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)

    Package not available

  • dep: libgcc_s.so.1()(64bit)

    Package not available

  • dep: libgcc_s.so.1(GCC_3.0)(64bit)

    Package not available

  • dep: libgcc_s.so.1(GCC_3.3)(64bit)

    Package not available

  • dep: libgcc_s.so.1(GCC_4.2.0)(64bit)

    Package not available

  • dep: rust+cargo

    Package not available

  • dep: libc.so.6(GLIBC_2.39)(64bit)

    Package not available

Download cargo-auditable

ArchitecturePackage SizeInstalled SizeFiles
x86_64430 KiB1024 KiB[list of files]

Package file paths (1)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/cargo-auditable

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browserBuild an image that includes cargo-auditable

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.7.5~0-1.3tumbleweed / ossx86_64openSUSE Tumbleweed · OSS · multi-architecture430 KiB1024 KiBx86_64/cargo-auditable-0.7.5~0-1.3.x86_64.rpm

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • openSUSE Tumbleweed OSSSep 1, 2026

    Authoritative source; repository metadata signature verified, revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified