'cargo auditable' can now be used as a drop-in replacement for Cargo

cargo auditable embeds the list of Cargo dependencies into your compiled binary, so you can check it for known vulnerabilities (e.g. OpenSSL CVEs) later.

The data format is supported by cargo audit, Syft and Trivy. Reading it from your own tools is also very easy.

---

The latest release of cargo auditable supports using it as a drop-in replacement for cargo, so you can simply alias cargo="cargo auditable" and everything should just work! You can find more info here.

(This should also work on Windows, but we don't have a recipe for doing that in the documentation. Contributions are very welcome!)

Also, if you're using sccache, you no longer need a version from Git - the latest release, 0.3.1 has all the fixes required for it to work with cargo auditable.