Rust Doctor
← Rule catalog

Cargo health · Security

rust_doctor::cargo::unpinned_git_dependency

Set rev to the full 40-character commit SHA intended by the project.

Category
Security
Default level
warn
Tier
P1
Producer
Cargo health

What it reads

Cargo.toml, Cargo.lock and .cargo/config.toml.

Tier

Serious: worth interrupting other work for.

The tier bounds how severe a rule may be; its category bounds the tier.

Change it

Turn it off, or make it blocking, without touching the code it flags:

rust-doctor --rule rust_doctor::cargo::unpinned_git_dependency=off .
rust-doctor --rule rust_doctor::cargo::unpinned_git_dependency=error .

Set it once in rust-doctor.toml

Other Security rules