
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
rust_template
Advanced tools
A production-ready Rust project template to bootstrap new projects fast. It includes a clean Cargo layout, Docker, and a complete CI/CD suite.
🚀 A production‑ready Rust project template to bootstrap new projects fast. It includes a clean Cargo layout, Docker, and a complete CI/CD suite.
Click Use this template to start a new repository from this scaffold.
Other Languages: English | 繁體中文 | 简体中文
IMPORTANT: This is a template repository. Before using it for your project, you must:
rust_template to your project name across the entire codebaseCargo.toml, cli/nodejs/package.json, and cli/python/pyproject.tomlcli/python/src/rust_template to your project nameFor detailed step-by-step instructions, see .github/copilot-instructions.md.
Quick verification after setup:
grep -r "rust_template" . --exclude-dir=target --exclude-dir=.git # Should find minimal matches
make fmt && cargo build && cargo test --all # Verify everything works
src/lib.rs, src/main.rs, tests/)Requirements:
Install Rust via rustup if you haven't already.
make fmt # rustfmt + clippy
make test # cargo test (all targets)
make test-verbose # cargo test (all targets with verbose output)
make coverage # generate LCOV coverage report
make build # cargo build (release mode)
make build-release # cargo build --release
make run # run the release binary
make clean # clean build artifacts and caches
make package # build crate package (allow dirty)
make help # list targets
The binary automatically displays dynamic version information including:
Cargo.toml version if no tags)Example output:
rust_template v0.1.25-2-gf4ae332-dirty
Built with Rust 1.90.0 and Cargo 1.90.0
This version information is embedded at build time through build.rs and automatically updated based on your git state.
docker build -f docker/Dockerfile --target prod -t ghcr.io/<owner>/<repo>:latest .
docker run --rm ghcr.io/<owner>/<repo>:latest
Or using the actual binary name:
docker build -f docker/Dockerfile --target prod -t rust_template:latest .
docker run --rm rust_template:latest
make package # build crate package (allow dirty)
# or use cargo directly:
cargo package --locked --allow-dirty
# CARGO_REGISTRY_TOKEN=... cargo publish
CI builds run automatically on tags matching v* and upload the .crate file. Uncomment the publish step in build_package.yml to automate crates.io releases.
This template does not ship cross-compile tooling by default. If you need cross or zig-based builds locally, install and configure them per your environment.
GitHub Actions build_release.yml builds multi-platform release binaries on tags matching v* and uploads them to the GitHub Release assets.
Targets:
Assets naming:
<bin>-v<version>-<target>.tar.gz (all platforms)<bin>-v<version>-<target>.zip (Windows additionally)test.yml): cargo build/test + generate LCOV coverage report and upload artifactcode-quality-check.yml): rustfmt check + clippy (deny warnings)build_package.yml): package on tag v*, optional crates.io publishbuild_image.yml): push to GHCR on main/master and tags v*build_release.yml): Linux release binaries uploaded on tags v*auto_labeler.yml): automatically label PRs based on branch names and file changescode_scan.yml): multi-layer security scanning (GitLeaks, Trufflehog secret scanning, CodeQL code analysis, Trivy vulnerability scanning)release_drafter.yml): auto-generate release notessemantic-pull-request.yml): enforce PR title formatOpen issues/PRs
Use Conventional Commits for PR titles
Keep code formatted and clippy‑clean
After every edit, run cargo build to confirm compilation is successful
Before opening a PR, please run locally:
cargo fmt --all -- --checkcargo clippy --all-targets --all-features -- -D warningscargo testMIT — see LICENSE.
FAQs
A production-ready Rust project template to bootstrap new projects fast. It includes a clean Cargo layout, Docker, and a complete CI/CD suite.
We found that rust_template demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.