rust
4 guardrails, all at version v1.
| Guardrail | Default severity | What it checks |
|---|---|---|
rust/edition-floor | warning | The package declares a Rust edition rather than falling back to the implied 2015 one, and that edition is no older than the configured floor. |
rust/lockfile-committed | warning | The build commits Cargo.lock, so a rebuild of the same commit resolves the same crate versions. |
rust/no-git-dependencies | warning | No manifest declares a dependency with a git source, so every crate in the build comes from a registry that versions it. |
rust/version-declared | warning | The build names the Rust toolchain it compiles with, that toolchain is one exact release rather than a moving channel, and it is no older than the configured floor. |
Shared inputs
Every rust guardrail declares these inputs, and each one may add its own.
| Input | Description | Default |
|---|---|---|
projectDir | Directory holding the project, relative to the directory the CLI runs in. | . |
Shared collectors
Every rust guardrail is handed the facts these collectors gather, and each one may ask for more of its own.
| Collector | Gathers |
|---|---|
rust | The Cargo build in the project directory: the crate it declares, the Rust version and edition it asks for, every workspace member, the dependencies each manifest names with where each comes from and whether it is pinned, and the lock file beside them. |
Every guardrail in this category is configured the same way, in the guardrails.checks array of buildnote.json. See Configuring guardrails for every option, and Guardrails to search the whole library.