Rust

Rust SAST targets unsafe patterns that can bypass Rust’s usual safety guarantees

What it commonly detects:

• Dangerous unsafe usage patterns
• Deserialization/parser misuse leading to security issues
• Command execution and file system risks
• Misconfigurations of TLS and crypto crates

Recommended doc additions:

• “How we treat unsafe blocks” (risk-based explanation)
• “When a finding is security vs reliability” (triage guidance)