Files
Zanie Blue 9345450b4c Use cargo auditable to include SBOM in uv builds (#18276)
Inspired by #18252 

This required an upstream change
https://github.com/rust-secure-code/cargo-auditable/pull/245 which is
now released.

This increases binary sizes slightly, ~4KB.

The cargo wrapper implementation will be extended in #18280 to code sign
binaries.
2026-03-06 11:38:02 -06:00

17 lines
363 B
Bash
Executable File

#!/usr/bin/env sh
## Wrapper script that invokes `cargo auditable` instead of plain `cargo`.
##
## Use `scripts/install-cargo-extensions.sh` to install the dependencies.
##
## Usage:
##
## CARGO="$PWD/scripts/cargo.sh" cargo build --release
set -eu
if [ -n "${REAL_CARGO:-}" ]; then
exec "$REAL_CARGO" auditable "$@"
else
exec cargo auditable "$@"
fi