testing/*: build with cargo-auditable

142 files changed, 437 insertions, 408 deletions

diff --git a/testing/agate/APKBUILD b/testing/agate/APKBUILD
index e1e3b03af4f..6d72214a268 100644
--- a/testing/agate/APKBUILD
+++ b/testing/agate/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Cowington Post <cowingtonpost@gmail.com>
 pkgname=agate
 pkgver=3.3.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple Gemini server for static files"
 url="https://github.com/mbrubeck/agate"
 # rust-ring
 arch="all !s390x !ppc64le !riscv64"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 install="$pkgname.pre-install"
 subpackages="$pkgname-openrc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/mbrubeck/agate/archive/refs/tags/v$pkgver.tar.gz
@@ -22,7 +22,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release
+	cargo auditable build --release
 }
 
 check() {
diff --git a/testing/android-apkeep/APKBUILD b/testing/android-apkeep/APKBUILD
index 8575696de4a..1c00af609cb 100644
--- a/testing/android-apkeep/APKBUILD
+++ b/testing/android-apkeep/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=android-apkeep
 pkgver=0.15.0
-pkgrel=0
+pkgrel=1
 pkgdesc="A command-line tool for downloading Android APK files from various sources"
 url="https://github.com/EFForg/apkeep"
 # ppc64le, riscv64, s390x: ring crate
@@ -11,6 +11,7 @@ license="MIT"
 makedepends="
 	bzip2-dev
 	cargo
+	cargo-auditable
 	openssl-dev
 	zstd-dev
 	"
@@ -37,7 +38,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 package() {
diff --git a/testing/apmpkg/APKBUILD b/testing/apmpkg/APKBUILD
index 7b3d2b90869..4e1da505fbd 100644
--- a/testing/apmpkg/APKBUILD
+++ b/testing/apmpkg/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: kedap <kedap.dev@protonmail.com>
 pkgname=apmpkg
 pkgver=1.5.1
-pkgrel=1
+pkgrel=2
 pkgdesc="A Package Manager as a model: PKGBUILD"
 url="https://github.com/kedap/apmpkg"
 # armhf: test timeout
@@ -10,7 +10,7 @@ url="https://github.com/kedap/apmpkg"
 arch="all !s390x !armhf !riscv64"
 license="Apache-2.0"
 depends="git fakeroot wget ruby-bundler py3-pip bash ruby-dev npm"
-makedepends="cargo openssl-dev>3 patchutils"
+makedepends="cargo openssl-dev>3 patchutils cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -23,7 +23,7 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/Kedap/apmpkg/archive/refs/ta
 
 
 build() {
-	cargo build --release --locked --verbose
+	cargo auditable build --release --locked --verbose
 }
 
 check() {
diff --git a/testing/asciinema-rs/APKBUILD b/testing/asciinema-rs/APKBUILD
index a86307eeafd..2e77d07691c 100644
--- a/testing/asciinema-rs/APKBUILD
+++ b/testing/asciinema-rs/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: TBK <alpine@jjtc.eu>
 pkgname=asciinema-rs
 pkgver=0.5.1
-pkgrel=2
+pkgrel=3
 pkgdesc="A reimplementation of the asciinema command line program written in Rust."
 url="https://github.com/LegNeato/asciinema-rs"
 arch="x86_64" # Limited by cargo
 license="Apache-2.0 MIT"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 source="https://github.com/LegNeato/asciinema-rs/archive/v$pkgver/asciinema-rs-v$pkgver.tar.gz
 	 openssl3.patch
 	 "
@@ -15,7 +15,7 @@ options="!check" # fail on 'home'
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/asuran-cli/APKBUILD b/testing/asuran-cli/APKBUILD
index adc25239936..8cd09c6bb5d 100644
--- a/testing/asuran-cli/APKBUILD
+++ b/testing/asuran-cli/APKBUILD
@@ -2,13 +2,14 @@
 # Maintainer: Duncan Bellamy <dunk@denkimushi.com>
 pkgname=asuran-cli
 pkgver=0.1.6
-pkgrel=4
+pkgrel=5
 pkgdesc="Asuran is a new archive format and rust implementation"
 url="https://gitlab.com/asuran-rs/asuran"
 arch="all !s390x !riscv64"
 license="BSD-2-Clause-Patent"
 makedepends="
 	cargo
+	cargo-auditable
 	libssh2-dev
 	openssl-dev
 	xz-dev
@@ -36,7 +37,7 @@ build() {
 		;;
 	esac
 
-	cargo build --release --frozen $features --package asuran-cli
+	cargo auditable build --release --frozen $features --package asuran-cli
 }
 
 check() {
diff --git a/testing/bartib/APKBUILD b/testing/bartib/APKBUILD
index c471603fcb8..5cf49bd4347 100644
--- a/testing/bartib/APKBUILD
+++ b/testing/bartib/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=bartib
 pkgver=1.0.1
-pkgrel=0
+pkgrel=1
 pkgdesc="simple timetracker for the command line"
 url="https://github.com/nikolassv/bartib"
 arch="all !s390x !riscv64" # limeted by rust/cargo
 license="GPL-3.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/nikolassv/bartib/archive/refs/tags/v$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/beancount-language-server/APKBUILD b/testing/beancount-language-server/APKBUILD
index d4e72b87de7..8f7cb70b630 100644
--- a/testing/beancount-language-server/APKBUILD
+++ b/testing/beancount-language-server/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=beancount-language-server
 pkgver=1.3.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Language server for Beancount files"
 url="https://github.com/polarmutex/beancount-language-server"
 license="MIT"
 arch="all !armhf" # FTBFS
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/polarmutex/beancount-language-server/archive/v$pkgver/beancount-language-server-$pkgver.tar.gz"
 options="!check" # no test suite
 
@@ -25,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 package() {
diff --git a/testing/boa-cli/APKBUILD b/testing/boa-cli/APKBUILD
index 0068ec585c9..957e6ed0215 100644
--- a/testing/boa-cli/APKBUILD
+++ b/testing/boa-cli/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=boa-cli
 pkgver=0.16
-pkgrel=0
+pkgrel=1
 pkgdesc="An embeddable and experimental Javascript engine written in Rust"
 url="https://github.com/boa-dev/boa/"
 # 32-bit: failing tests
 # s390x/riscv64: nix crate
 arch="all !armhf !armv7 !x86 !riscv64 !s390x"
 license="MIT OR Unlicense"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/boa-dev/boa/archive/refs/tags/v$pkgver/boa-$pkgver.tar.gz"
 builddir="$srcdir/boa-$pkgver"
 
@@ -21,7 +21,7 @@ prepare() {
 }
 
 build() {
-	cargo build --package boa_cli --release --frozen
+	cargo auditable build --package boa_cli --release --frozen
 }
 
 check() {
diff --git a/testing/bore/APKBUILD b/testing/bore/APKBUILD
index ebba941363d..4b1808d3937 100644
--- a/testing/bore/APKBUILD
+++ b/testing/bore/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Thomas Kienlen <kommander@laposte.net>
 pkgname=bore
 pkgver=0.5.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple CLI tool for making tunnels to localhost"
 url="https://github.com/ekzhang/bore"
 # riscv64: rust broken
 # s390x: tests fail
 arch="all !riscv64 !s390x"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/ekzhang/bore/archive/v$pkgver/bore-$pkgver.tar.gz"
 
 
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/cargo-deny/APKBUILD b/testing/cargo-deny/APKBUILD
index f78d61e2877..6be7154b62e 100644
--- a/testing/cargo-deny/APKBUILD
+++ b/testing/cargo-deny/APKBUILD
@@ -1,13 +1,14 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=cargo-deny
 pkgver=0.13.9
-pkgrel=0
+pkgrel=1
 pkgdesc="Cargo plugin for linting dependencies"
 url="https://github.com/EmbarkStudios/cargo-deny"
 arch="all"
 license="Apache-2.0 OR MIT"
 makedepends="
 	cargo
+	cargo-auditable
 	libgit2-dev
 	libssh2-dev
 	openssl-dev
@@ -43,7 +44,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen --no-default-features
+	cargo auditable build --release --frozen --no-default-features
 }
 
 check() {
diff --git a/testing/cargo-generate/APKBUILD b/testing/cargo-generate/APKBUILD
index b0bd0ed9d09..391fe6f35ed 100644
--- a/testing/cargo-generate/APKBUILD
+++ b/testing/cargo-generate/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=cargo-generate
 pkgver=0.18.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Use pre-existing git repositories as templates"
 url="https://github.com/cargo-generate/cargo-generate"
 license="MIT OR Apache-2.0"
 arch="all !s390x" # fails to build nix crate
-makedepends="cargo libgit2-dev openssl-dev"
+makedepends="cargo libgit2-dev openssl-dev cargo-auditable"
 source="https://github.com/cargo-generate/cargo-generate/archive/v$pkgver/cargo-generate-$pkgver.tar.gz
 	remove-cargo-husky.patch
 	"
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --no-default-features
+	cargo auditable build --frozen --release --no-default-features
 }
 
 check() {
diff --git a/testing/cargo-vendor-filterer/APKBUILD b/testing/cargo-vendor-filterer/APKBUILD
index 9ce38eb8b72..01482722c08 100644
--- a/testing/cargo-vendor-filterer/APKBUILD
+++ b/testing/cargo-vendor-filterer/APKBUILD
@@ -1,13 +1,14 @@
 # Maintainer: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
 pkgname=cargo-vendor-filterer
 pkgver=0.5.9
-pkgrel=0
+pkgrel=1
 pkgdesc="cargo vendor with filtering for platforms and more"
 url="https://github.com/coreos/cargo-vendor-filterer"
 arch="all"
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	openssl-dev
 	"
 source="$pkgname-$pkgver.tar.gz::https://github.com/coreos/cargo-vendor-filterer/archive/refs/tags/v$pkgver.tar.gz"
@@ -26,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/castor/APKBUILD b/testing/castor/APKBUILD
index 34754db0b2c..6d497a1db3e 100644
--- a/testing/castor/APKBUILD
+++ b/testing/castor/APKBUILD
@@ -1,17 +1,17 @@
 # Maintainer: Joel Hansen <joelh@disroot.org>
 pkgname=castor
 pkgver=0.9.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Graphical browser for Gemini, Gopher and Finger"
 url="https://sr.ht/~julienxx/Castor/"
 license="MIT"
 arch="all !s390x !riscv64" # limited by rust/cargo
-makedepends="rust cargo gtk+3.0-dev openssl-dev>3"
+makedepends="rust cargo gtk+3.0-dev openssl-dev>3 cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://git.sr.ht/~julienxx/castor/archive/$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked --verbose
+	cargo auditable build --release --locked --verbose
 }
 
 check() {
diff --git a/testing/checksec-rs/APKBUILD b/testing/checksec-rs/APKBUILD
index 8e76ad65b82..853c5ae0db1 100644
--- a/testing/checksec-rs/APKBUILD
+++ b/testing/checksec-rs/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=checksec-rs
 pkgver=0.0.9
-pkgrel=0
+pkgrel=1
 pkgdesc="Fast multi-platform (ELF/PE/MachO) binary checksec"
 url="https://github.com/etke/checksec.rs"
 arch="all"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/etke/checksec.rs/archive/refs/tags/v$pkgver.tar.gz"
 builddir="$srcdir/checksec.rs-$pkgver"
 options="net"
@@ -22,7 +22,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen --no-default-features --features="elf,color"
+	cargo auditable build --release --frozen --no-default-features --features="elf,color"
 }
 
 check() {
diff --git a/testing/chim/APKBUILD b/testing/chim/APKBUILD
index c9274846665..65e6531faf9 100644
--- a/testing/chim/APKBUILD
+++ b/testing/chim/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jeff Dickey <release@chim.sh>
 pkgname=chim
 pkgver=1.1.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Cross-platform binary shims with optional remote fetching."
 url="https://chim.sh"
 arch="all !s390x !riscv64 !ppc64le" # limited by cargo
@@ -10,6 +10,7 @@ license="MIT"
 makedepends="
 	bzip2-dev
 	cargo
+	cargo-auditable
 	xz-dev
 	"
 subpackages="$pkgname-doc"
@@ -24,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/cicada/APKBUILD b/testing/cicada/APKBUILD
index 1ee306e531d..2fbe0dc58ab 100644
--- a/testing/cicada/APKBUILD
+++ b/testing/cicada/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Hugo Wang <w@mitnk.com>
 pkgname=cicada
 pkgver=0.9.36
-pkgrel=0
+pkgrel=1
 pkgdesc="A bash-like Unix shell"
 url="https://github.com/mitnk/cicada"
 # s390x and riscv64 blocked by cargo
 arch="all !s390x !riscv64"
 license="MIT"
 depends="ncurses-terminfo-base"
-makedepends="sqlite-dev cargo"
+makedepends="sqlite-dev cargo cargo-auditable"
 checkdepends="xz"
 install="$pkgname.post-install $pkgname.pre-deinstall"
 subpackages="$pkgname-doc"
@@ -25,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/cloud-hypervisor/APKBUILD b/testing/cloud-hypervisor/APKBUILD
index 9d2d7f68514..e7d689947df 100644
--- a/testing/cloud-hypervisor/APKBUILD
+++ b/testing/cloud-hypervisor/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=cloud-hypervisor
 pkgver=32.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Virtual machine monitor for modern cloud workloads"
 url="https://www.cloudhypervisor.org/"
 # Only x86_64 and aarch64 are officially supported
 arch="x86_64 aarch64"
 license="Apache-2.0 AND BSD-3-Clause"
-makedepends="cargo libcap-utils"
+makedepends="cargo libcap-utils cargo-auditable"
 source="https://github.com/cloud-hypervisor/cloud-hypervisor/releases/download/v$pkgver/cloud-hypervisor-v$pkgver.tar.xz"
 builddir="$srcdir/$pkgname-v$pkgver"
 options="!check" # tests need CAP_NET_ADMIN
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/conduit/APKBUILD b/testing/conduit/APKBUILD
index 713cc45121d..c7bf96e24a0 100644
--- a/testing/conduit/APKBUILD
+++ b/testing/conduit/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Patrycja Rosa <alpine@ptrcnull.me>
 pkgname=conduit
 pkgver=0.5.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple, fast and reliable chat server powered by Matrix"
 url="https://conduit.rs/"
 # ring-rs
 arch="all !riscv64 !ppc64le !s390x"
 license="Apache-2.0"
-makedepends="cargo sqlite-dev"
+makedepends="cargo sqlite-dev cargo-auditable"
 install="$pkgname.pre-install"
 subpackages="$pkgname-openrc"
 source="https://gitlab.com/famedly/conduit/-/archive/v$pkgver/conduit-v$pkgver.tar.gz
@@ -30,7 +30,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen $_features
+	cargo auditable build --release --frozen $_features
 }
 
 check() {
diff --git a/testing/desed/APKBUILD b/testing/desed/APKBUILD
index 0eba073e9be..bbca5fd5f05 100644
--- a/testing/desed/APKBUILD
+++ b/testing/desed/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=desed
 pkgver=1.2.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Demystify and debug your sed scripts, from comfort of your terminal"
 url="https://github.com/SoptikHa2/desed"
 # riscv64: rust broken
 arch="all !riscv64"
 license="GPL-3.0-or-later"
 depends="sed"  # needs GNU sed
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="$pkgname-doc"
 source="https://github.com/SoptikHa2/desed/archive/v$pkgver/desed-$pkgver.tar.gz
 	Cargo.lock
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/diskonaut/APKBUILD b/testing/diskonaut/APKBUILD
index dc3790f2b68..772e8cc760a 100644
--- a/testing/diskonaut/APKBUILD
+++ b/testing/diskonaut/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Willow Barraco <contact@willowbarraco.fr>
 pkgname=diskonaut
 pkgver=0.11.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Terminal disk space navigator"
 url="https://github.com/imsnif/diskonaut"
 license="MIT"
 arch="all !armhf !s390x !riscv64" # doesn't build
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/imsnif/diskonaut/archive/refs/tags/$pkgver.tar.gz"
 options="net"
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/diskus/APKBUILD b/testing/diskus/APKBUILD
index 73732bc7a2b..6cc7f5689a8 100644
--- a/testing/diskus/APKBUILD
+++ b/testing/diskus/APKBUILD
@@ -2,18 +2,18 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=diskus
 pkgver=0.7.0
-pkgrel=0
+pkgrel=1
 pkgdesc="fast alternative for du"
 url="https://github.com/sharkdp/diskus"
 arch="all !s390x !riscv64" # limited by cargo
 options="!check" #size_of_single_file test timout on armhf
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgdir.tar.gz::https://github.com/sharkdp/diskus/archive/refs/tags/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 package() {
diff --git a/testing/dotenv-linter/APKBUILD b/testing/dotenv-linter/APKBUILD
index 742e263e7db..2ed06e9443e 100644
--- a/testing/dotenv-linter/APKBUILD
+++ b/testing/dotenv-linter/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Patrycja Rosa <alpine@ptrcnull.me>
 pkgname=dotenv-linter
 pkgver=3.3.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Lightning-fast linter for .env files"
 url="https://dotenv-linter.github.io"
 arch="all !s390x !ppc64le !riscv64" # rust/rustls
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/dotenv-linter/dotenv-linter/archive/refs/tags/v$pkgver/dotenv-linter-$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/dum/APKBUILD b/testing/dum/APKBUILD
index 44b7e74add0..c87c6476d60 100644
--- a/testing/dum/APKBUILD
+++ b/testing/dum/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=dum
 pkgver=0.1.19
-pkgrel=0
+pkgrel=1
 pkgdesc="An npm scripts runner written in Rust"
 url="https://github.com/egoist/dum"
 arch="aarch64 armhf armv7 ppc64le x86 x86_64"  # blocked by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/egoist/dum/archive/v$pkgver/dum-$pkgver.tar.gz
 	strip-env_logger-features.patch
 	"
@@ -31,7 +31,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/electron-tasje/APKBUILD b/testing/electron-tasje/APKBUILD
index 8d97af9676a..48f52ba8889 100644
--- a/testing/electron-tasje/APKBUILD
+++ b/testing/electron-tasje/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=electron-tasje
 pkgver=0.5.7
-pkgrel=0
+pkgrel=1
 pkgdesc="Tiny replacement for electron-builder"
 url="https://codeberg.org/selfisekai/electron_tasje/"
 arch="aarch64 x86_64"	# only useful on platforms with electron
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="electron_tasje-$pkgver.tar.gz::https://codeberg.org/selfisekai/electron_tasje/archive/v$pkgver.tar.gz"
 builddir="$srcdir/electron_tasje"
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/elfx86exts/APKBUILD b/testing/elfx86exts/APKBUILD
index 65e20c0e3b6..f6273c16d95 100644
--- a/testing/elfx86exts/APKBUILD
+++ b/testing/elfx86exts/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=elfx86exts
 pkgver=0.5.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Decode x86 binaries and detect cpu feature requirements"
 url="https://github.com/pkgw/elfx86exts"
 # riscv64: rust
 arch="all !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/pkgw/elfx86exts/archive/refs/tags/elfx86exts@$pkgver.tar.gz"
 builddir="$srcdir/$pkgname-$pkgname-$pkgver"
 options="net"
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/eva/APKBUILD b/testing/eva/APKBUILD
index 3eaeb1809ce..e4fdbacac55 100644
--- a/testing/eva/APKBUILD
+++ b/testing/eva/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=eva
 pkgver=0.3.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Calculator REPL, similar to bc(1)"
 url="https://github.com/nerdypepper/eva"
 license="MIT"
 arch="all !s390x !riscv64" # limited by rust/cargo
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/nerdypepper/eva/archive/v$pkgver/eva-$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/eww/APKBUILD b/testing/eww/APKBUILD
index aca3ff785e9..c44caa06032 100644
--- a/testing/eww/APKBUILD
+++ b/testing/eww/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=eww
 pkgver=0.4.0
-pkgrel=0
+pkgrel=1
 pkgdesc="ElKowars wacky widgets"
 url="https://elkowar.github.io/eww/"
 arch="aarch64 x86_64"  # blocked by rustup
@@ -11,9 +11,10 @@ license="MIT"
 #  Don't move this aport out of the testing repo until it can be built with
 #  our rust!
 makedepends="
-	rustup
+	cargo-auditable
 	gtk+3.0-dev
 	gtk-layer-shell-dev
+	rustup
 	"
 subpackages="$pkgname-dbg"
 source="https://github.com/elkowar/eww/archive/refs/tags/v$pkgver/eww-$pkgver.tar.gz
@@ -41,7 +42,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --no-default-features --features=wayland
+	cargo auditable build --frozen --release --no-default-features --features=wayland
 }
 
 check() {
diff --git a/testing/felix/APKBUILD b/testing/felix/APKBUILD
index b7a863d4ba3..47938e9161f 100644
--- a/testing/felix/APKBUILD
+++ b/testing/felix/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=felix
 pkgver=2.2.8
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple TUI file manager with vim-like key mapping"
 url="https://kyoheiu.dev/felix/"
 # s390x: nix crate doesn't build yet
 arch="all !s390x"
 license="MIT"
-makedepends="cargo bzip2-dev zlib-ng-dev zstd-dev"
+makedepends="cargo bzip2-dev zlib-ng-dev zstd-dev cargo-auditable"
 checkdepends="zoxide"
 source="
 	$pkgname-$pkgver.tar.gz::https://github.com/kyoheiu/felix/archive/refs/tags/v$pkgver.tar.gz
@@ -33,7 +33,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/ffsend/APKBUILD b/testing/ffsend/APKBUILD
index e34c1d4cb1c..615c3a0363c 100644
--- a/testing/ffsend/APKBUILD
+++ b/testing/ffsend/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=ffsend
 pkgver=0.2.76
-pkgrel=2
+pkgrel=3
 pkgdesc="A fully featured Firefox Send client"
 url="https://gitlab.com/timvisee/ffsend"
 # riscv64: blocked by cargo
@@ -10,6 +10,7 @@ arch="all !riscv64"
 license="GPL-3.0-only"
 makedepends="
 	cargo
+	cargo-auditable
 	openssl-dev
 	"
 subpackages="
@@ -33,7 +34,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/filite/APKBUILD b/testing/filite/APKBUILD
index 06ff397bb3c..6f1a924b3c7 100644
--- a/testing/filite/APKBUILD
+++ b/testing/filite/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=filite
 pkgver=0.3.0
-pkgrel=1
+pkgrel=2
 pkgdesc="simple and light pastebin"
 url="https://github.com/raftario/filite"
 arch="x86_64 armv7 armhf aarch64 x86" # limited by rust/cargo
 license="MIT"
-makedepends="cargo sqlite-dev"
+makedepends="cargo sqlite-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/raftario/filite/archive/refs/tags/v$pkgver.tar.gz
 	fix-build.patch
 	system-sqlite.patch
@@ -21,7 +21,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/firecracker/APKBUILD b/testing/firecracker/APKBUILD
index d4714dd21e1..d345282c91c 100644
--- a/testing/firecracker/APKBUILD
+++ b/testing/firecracker/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Dennis Przytarski <dennis@przytarski.com>
 pkgname=firecracker
 pkgver=1.3.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Secure and fast microVMs for serverless computing"
 url="https://github.com/firecracker-microvm/firecracker"
 arch="aarch64 x86_64"
 license="Apache-2.0"
-makedepends="rust cargo clang-dev linux-headers"
+makedepends="rust cargo clang-dev linux-headers cargo-auditable"
 subpackages="
 	$pkgname-seccompiler
 	$pkgname-rebase-snap:rebase_snap
@@ -29,7 +29,7 @@ prepare() {
 
 build() {
 	export CARGO_PROFILE_RELEASE_OPT_LEVEL=2
-	cargo build \
+	cargo auditable build \
 		--package firecracker \
 		--package jailer \
 		--package seccompiler \
diff --git a/testing/geckodriver/APKBUILD b/testing/geckodriver/APKBUILD
index a4dae8f83d7..28735c7d82d 100644
--- a/testing/geckodriver/APKBUILD
+++ b/testing/geckodriver/APKBUILD
@@ -2,18 +2,18 @@
 # Maintainer: Nulo <git@nulo.in>
 pkgname=geckodriver
 pkgver=0.33.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Proxy for using W3C WebDriver compatible clients to interact with Gecko-based browsers."
 url="https://github.com/mozilla/geckodriver"
 # s390x: limited by cargo
 arch="all !s390x !riscv64"
 license="MPL"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/mozilla/geckodriver/archive/refs/tags/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --bin geckodriver
+	cargo auditable build --release --bin geckodriver
 }
 
 check() {
diff --git a/testing/gitoxide/APKBUILD b/testing/gitoxide/APKBUILD
index 633eea8b6a8..5024d5c3c97 100644
--- a/testing/gitoxide/APKBUILD
+++ b/testing/gitoxide/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=gitoxide
 pkgver=0.14.0
-pkgrel=0
+pkgrel=1
 pkgdesc="An idiomatic, lean, fast & safe pure Rust implementation of Git"
 url="https://github.com/Byron/gitoxide"
 # armhf, armv7, ppc64le, s390x: fails to build crate sha1-asm
@@ -11,6 +11,7 @@ arch="all !armhf !armv7 !ppc64le !riscv64 !s390x"
 license="Apache-2.0 OR MIT"
 makedepends="
 	cargo
+	cargo-auditable
 	curl-dev
 	zlib-dev
 	zlib-ng-dev
@@ -50,7 +51,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/gleam/APKBUILD b/testing/gleam/APKBUILD
index a0355632330..06457e02e40 100644
--- a/testing/gleam/APKBUILD
+++ b/testing/gleam/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: rubicon <rubicon@mailo.com>
 pkgname=gleam
 pkgver=0.28.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Statically-typed language that compiles to Erlang and JS"
 url="https://gleam.run/"
 # s390x, riscv64, ppc64le: ring
@@ -10,7 +10,7 @@ url="https://gleam.run/"
 arch="all !armhf !armv7 !s390x !riscv64 !ppc64le"
 license="Apache-2.0"
 depends="erlang-dev"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver-2.tar.gz::https://github.com/gleam-lang/gleam/archive/refs/tags/v$pkgver.tar.gz"
 
 
@@ -21,7 +21,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/gobang/APKBUILD b/testing/gobang/APKBUILD
index a10cdf02541..8a4126fbe21 100644
--- a/testing/gobang/APKBUILD
+++ b/testing/gobang/APKBUILD
@@ -3,14 +3,15 @@
 pkgname=gobang
 pkgver=0.1.0_alpha5
 _pkgver=0.1.0-alpha.5
-pkgrel=0
+pkgrel=1
 pkgdesc="Cross-platform TUI database management tool written in Rust"
 url="https://github.com/TaKO8Ki/gobang"
 arch="x86_64 armv7 armhf aarch64 x86"  # limited by rust/cargo/ring crate
 license="GPL-2.0-or-later"
 makedepends="
-	rust
 	cargo
+	cargo-auditable
+	rust
 	"
 source="https://github.com/TaKO8Ki/gobang/archive/refs/tags/v$_pkgver/gobang-v$_pkgver.tar.gz"
 options="!check" # no test suite
@@ -23,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/grass/APKBUILD b/testing/grass/APKBUILD
index 7d78f493004..c3a94f65199 100644
--- a/testing/grass/APKBUILD
+++ b/testing/grass/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=grass
 pkgver=0.12.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Sass compiler written purely in Rust"
 url="https://github.com/connorskees/grass"
 arch="all"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="
 	https://github.com/connorskees/grass/archive/v$pkgver/grass-v$pkgver.tar.gz
 	"
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build -p grass --release --frozen
+	cargo auditable build -p grass --release --frozen
 }
 
 check() {
diff --git a/testing/grcov/APKBUILD b/testing/grcov/APKBUILD
index 6083b00fd7b..178cd186683 100644
--- a/testing/grcov/APKBUILD
+++ b/testing/grcov/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Rasmus Thomsen <oss@cogitri.dev>
 pkgname=grcov
 pkgver=0.8.18
-pkgrel=0
+pkgrel=1
 pkgdesc="Rust tool to collect and aggregate code coverage data"
 url="https://github.com/mozilla/grcov"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # Limited by cargo
 license="MPL-2.0"
 depends="gcc" # gcov
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 options="net !check" # Failing due to utf-8 (locale?)
 source="$pkgname-$pkgver.tar.gz::https://github.com/mozilla/grcov/archive/v$pkgver.tar.gz"
 
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/greetd-regreet/APKBUILD b/testing/greetd-regreet/APKBUILD
index e6e123562ed..3212f6e6857 100644
--- a/testing/greetd-regreet/APKBUILD
+++ b/testing/greetd-regreet/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Guy Godfroy <guy.godfroy@gugod.fr>
 pkgname=greetd-regreet
 pkgver=0.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Clean and customizable GTK4 based greeter for greetd"
 url="https://github.com/rharish101/ReGreet"
 # s390x, riscv64: greetd
@@ -10,7 +10,7 @@ url="https://github.com/rharish101/ReGreet"
 arch="all !armhf !s390x !riscv64"
 license="GPL-3.0-or-later"
 depends="greetd"
-makedepends="cargo gtk4.0-dev"
+makedepends="cargo gtk4.0-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/rharish101/ReGreet/archive/refs/tags/$pkgver.tar.gz"
 builddir="$srcdir/ReGreet-$pkgver"
 
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/greetd-wlgreet/APKBUILD b/testing/greetd-wlgreet/APKBUILD
index 0c9ee2d6e3c..e1b76457af0 100644
--- a/testing/greetd-wlgreet/APKBUILD
+++ b/testing/greetd-wlgreet/APKBUILD
@@ -3,7 +3,7 @@
 pkgname=greetd-wlgreet
 _projname=wlgreet
 pkgver=0.4
-pkgrel=0
+pkgrel=1
 pkgdesc="Raw wayland greeter for greetd"
 url="https://git.sr.ht/~kennylevinsen/wlgreet"
 # riscv64, s390x: blocked by greetd
@@ -15,6 +15,7 @@ depends="
 	"
 makedepends="
 	cargo
+	cargo-auditable
 	wayland-dev
 	"
 source="$pkgname-$pkgver.tar.gz::https://git.sr.ht/~kennylevinsen/wlgreet/archive/$pkgver.tar.gz
@@ -32,7 +33,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 package() {
diff --git a/testing/grpc-health-check/APKBUILD b/testing/grpc-health-check/APKBUILD
index 9c2792fbe75..1393a5e1b1d 100644
--- a/testing/grpc-health-check/APKBUILD
+++ b/testing/grpc-health-check/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Build Robot <buildrobot@pay.pizza>
 pkgname=grpc-health-check
 pkgver=0.1.1
-pkgrel=2
+pkgrel=3
 arch="all !s390x !ppc64le !armhf !armv7 !riscv64"
 pkgdesc="gRPC health checking protocol"
 url="https://github.com/paypizza/grpc-health-check"
 license="Apache-2.0"
-makedepends="cargo protoc rustfmt"
+makedepends="cargo protoc rustfmt cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/paypizza/grpc-health-check/archive/$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 
 build() {
 	export PROTOC=/usr/bin/protoc
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/habitctl/APKBUILD b/testing/habitctl/APKBUILD
index 6e9a3db1949..542d217f646 100644
--- a/testing/habitctl/APKBUILD
+++ b/testing/habitctl/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Willow Barraco <contact@willowbarraco.fr>
 pkgname=habitctl
 pkgver=0.1.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Minimalist command line tool to track and examine habits"
 url="https://github.com/blinry/habitctl"
 arch="aarch64 armhf armv7 ppc64le x86 x86_64"  # limited by rust/cargo
 license="GPL-2.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/blinry/$pkgname/archive/refs/tags/$pkgver.tar.gz"
 options="!check"  # no tests provided
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/halp/APKBUILD b/testing/halp/APKBUILD
index 01a05509218..53de304917a 100644
--- a/testing/halp/APKBUILD
+++ b/testing/halp/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Orhun Parmaksız <orhunparmaksiz@gmail.com>
 pkgname=halp
 pkgver=0.1.6
-pkgrel=1
+pkgrel=2
 pkgdesc="A CLI tool to get help with CLI tools"
 url="https://github.com/orhun/halp"
 # s390x, ppc64le, riscv64: blocked by ring crate
 arch="all !s390x !ppc64le !riscv64"
 license="MIT OR Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 checkdepends="util-linux"
 subpackages="
 	$pkgname-doc
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 	mkdir -p man
 	OUT_DIR=man/ "./target/release/$pkgname-mangen"
 	mkdir -p completions
diff --git a/testing/hex/APKBUILD b/testing/hex/APKBUILD
index 92ad8c81cd4..514dab62884 100644
--- a/testing/hex/APKBUILD
+++ b/testing/hex/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=hex
 pkgver=0.4.2
-pkgrel=1
+pkgrel=2
 pkgdesc="futuristic take on hexdump"
 url="https://github.com/sitkevij/hex"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/sitkevij/hex/archive/refs/tags/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/horust/APKBUILD b/testing/horust/APKBUILD
index d24d1503383..f84b0f79e92 100644
--- a/testing/horust/APKBUILD
+++ b/testing/horust/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: William Desportes <williamdes@wdes.fr>
 pkgname=horust
 pkgver=0.1.7
-pkgrel=0
+pkgrel=1
 pkgdesc="Horust is a supervisor / init system written in rust and designed to be run inside containers"
 url="https://github.com/FedericoPonzi/Horust"
 # s390x, riscv64: nix/libc crates lack support
 arch="all !s390x !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 checkdepends="bash" # test_single_command uses bash
 subpackages="$pkgname-doc"
 options="net"
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/hstdb/APKBUILD b/testing/hstdb/APKBUILD
index 907b16fc4ed..3c6dfee2c3e 100644
--- a/testing/hstdb/APKBUILD
+++ b/testing/hstdb/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=hstdb
 pkgver=2.1.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Better history management for Zsh"
 url="https://github.com/AlexanderThaller/hstdb"
 # riscv64: textrels
 # s390x: fails to build nix crate
 arch="all !riscv64 !s390x"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/AlexanderThaller/hstdb/archive/$pkgver/hstdb-$pkgver.tar.gz
 	fix-format_duration-panicing.patch
 	replace-pretty_env_logger.patch
@@ -31,7 +31,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/htmlq/APKBUILD b/testing/htmlq/APKBUILD
index 72b784baefc..815daf9250b 100644
--- a/testing/htmlq/APKBUILD
+++ b/testing/htmlq/APKBUILD
@@ -2,18 +2,18 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=htmlq
 pkgver=0.4.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Like jq, but for HTML"
 url="https://github.com/mgdm/htmlq"
 license="MIT"
 arch="all !s390x !riscv64" # blocked by rust/cargo
 options="!check" # no test suite
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/mgdm/htmlq/archive/v$pkgver/htmlq-$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 package() {
diff --git a/testing/hurl/APKBUILD b/testing/hurl/APKBUILD
index c72da602225..3250314ced7 100644
--- a/testing/hurl/APKBUILD
+++ b/testing/hurl/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=hurl
 pkgver=3.0.0
-pkgrel=0
+pkgrel=1
 pkgdesc="CLI to run HTTP requests defined in simple plain text format"
 url="https://hurl.dev/"
 arch="all"
 license="Apache-2.0"
-makedepends="cargo python3 curl-dev libxml2-dev"
+makedepends="cargo python3 curl-dev libxml2-dev cargo-auditable"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/Orange-OpenSource/hurl/archive/refs/tags/$pkgver.tar.gz"
 options="!check" # tests require a running local web server
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 
 	for binary in hurl hurlfmt; do
 		python3 bin/release/gen_manpage.py docs/manual/$binary.md > $binary.1
diff --git a/testing/hwatch/APKBUILD b/testing/hwatch/APKBUILD
index 8ba0a9bba68..cdfc2a93496 100644
--- a/testing/hwatch/APKBUILD
+++ b/testing/hwatch/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=hwatch
 pkgver=0.3.9
-pkgrel=0
+pkgrel=1
 pkgdesc="A modern alternative to the watch command"
 url="https://github.com/blacknon/hwatch"
 arch="aarch64 armhf armv7 ppc64le x86 x86_64"  # blocked by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-fish-completion
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 package() {
diff --git a/testing/hyperlink/APKBUILD b/testing/hyperlink/APKBUILD
index 847641beb48..0b6f2be2646 100644
--- a/testing/hyperlink/APKBUILD
+++ b/testing/hyperlink/APKBUILD
@@ -1,14 +1,14 @@
 # Maintainer: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
 pkgname=hyperlink
 pkgver=0.1.27
-pkgrel=0
+pkgrel=1
 pkgdesc="Very fast link checker for CI"
 url="https://github.com/untitaker/hyperlink"
 # riscv64: fails to build libc crate
 # armhf: builds freeze and time out
 arch="all !riscv64 !armhf"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/untitaker/hyperlink/archive/refs/tags/$pkgver.tar.gz"
 
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/i3status-rust/APKBUILD b/testing/i3status-rust/APKBUILD
index 39a7f78d529..376395560a7 100644
--- a/testing/i3status-rust/APKBUILD
+++ b/testing/i3status-rust/APKBUILD
@@ -3,13 +3,14 @@
 # Maintainer: Galen Abell <galen@galenabell.com>
 pkgname=i3status-rust
 pkgver=0.31.4
-pkgrel=0
+pkgrel=1
 pkgdesc="i3status replacement in Rust"
 url="https://github.com/greshake/i3status-rust"
 arch="all !s390x !riscv64" # limited by cargo
 license="GPL-3.0-only"
 makedepends="
 	cargo
+	cargo-auditable
 	curl-dev
 	dbus-dev
 	lm-sensors-dev
@@ -31,7 +32,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/imageflow/APKBUILD b/testing/imageflow/APKBUILD
index b14ca2e4504..ada031b1bec 100644
--- a/testing/imageflow/APKBUILD
+++ b/testing/imageflow/APKBUILD
@@ -4,12 +4,12 @@ pkgname=imageflow
 pkgver=1.7.0
 _rcver=-rc64 # needed until first official release
 _commit=c8951261f8d90ea3a445eaa569538d398e19a25e
-pkgrel=1
+pkgrel=2
 pkgdesc="High-performance image manipulation for web servers"
 url="https://github.com/imazen/imageflow"
 arch="x86_64" # limited by cargo and SIMD dependency
 license="AGPL-3.0-only"
-makedepends="bash cargo zip nasm git openssl-dev>3 wget curl libpng-dev dssim"
+makedepends="bash cargo zip nasm git openssl-dev>3 wget curl libpng-dev dssim cargo-auditable"
 source="$pkgname-$pkgver$_rcver.tar.gz::https://github.com/imazen/imageflow/archive/v$pkgver$_rcver.tar.gz"
 builddir="$srcdir/$pkgname-$pkgver$_rcver"
 subpackages="$pkgname-server:_server
@@ -35,7 +35,7 @@ build() {
 	export GIT_DESCRIBE_AAL="tags/$version_prefix-0-alpine"
 	export GIT_OPTIONAL_BRANCH="n/a"
 
-	cargo build --workspace --release --locked
+	cargo auditable build --workspace --release --locked
 }
 
 check() {
diff --git a/testing/innernet/APKBUILD b/testing/innernet/APKBUILD
index 048fb1afe21..8c6e3573c70 100644
--- a/testing/innernet/APKBUILD
+++ b/testing/innernet/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Uli Baum <xeji@cat3.de>
 pkgname=innernet
 pkgver=1.5.5
-pkgrel=0
+pkgrel=1
 pkgdesc="A private network system that uses WireGuard under the hood"
 arch="all !armhf !ppc64le" # tests fail on armhf and ppc64le
 url="https://github.com/tonarino/innernet"
 license="MIT"
-makedepends="cargo clang-dev sqlite-dev"
+makedepends="cargo clang-dev sqlite-dev cargo-auditable"
 source="
 	https://github.com/tonarino/innernet/archive/v$pkgver/$pkgname-$pkgver.tar.gz
 	unbundle-sqlite.patch
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/jaq/APKBUILD b/testing/jaq/APKBUILD
index ca29d57818b..021994989fb 100644
--- a/testing/jaq/APKBUILD
+++ b/testing/jaq/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=jaq
 pkgver=0.10.0
-pkgrel=0
+pkgrel=1
 pkgdesc="jq clone focused on correctness, speed and simplicity"
 url="https://github.com/01mf02/jaq"
 # riscv64: build failed
 arch="all !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/01mf02/jaq/archive/v$pkgver/$pkgname-$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/jrsonnet-cli/APKBUILD b/testing/jrsonnet-cli/APKBUILD
index b54af9f368e..0c7585374c9 100644
--- a/testing/jrsonnet-cli/APKBUILD
+++ b/testing/jrsonnet-cli/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=jrsonnet-cli
 pkgver=0.4.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Rust implementation of Jsonnet language"
 url="https://github.com/CertainLach/jrsonnet"
 # riscv64: libc crate
 arch="all !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/CertainLach/jrsonnet/archive/refs/tags/v$pkgver/jrsonnet-v$pkgver.tar.gz"
 builddir="$srcdir/jrsonnet-$pkgver"
 
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --offline --release -p jrsonnet
+	cargo auditable build --frozen --offline --release -p jrsonnet
 }
 
 check() {
diff --git a/testing/jwt-cli/APKBUILD b/testing/jwt-cli/APKBUILD
index 8b8fd89400f..1f06d4ace1b 100644
--- a/testing/jwt-cli/APKBUILD
+++ b/testing/jwt-cli/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=jwt-cli
 pkgver=5.0.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Super fast CLI tool to decode and encode JWTs"
 url="https://github.com/mike-engel/jwt-cli"
 # blocked by ring crate
 arch="all !s390x !ppc64le !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/mike-engel/jwt-cli/archive/refs/tags/$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/kak-lsp/APKBUILD b/testing/kak-lsp/APKBUILD
index 705c9e97ad3..02ca1935390 100644
--- a/testing/kak-lsp/APKBUILD
+++ b/testing/kak-lsp/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Siva Mahadevan <me@svmhdvn.name>
 pkgname=kak-lsp
 pkgver=14.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Language Server Protocol client for Kakoune implemented in Rust"
 url="https://github.com/kak-lsp/kak-lsp"
 arch="all !s390x !riscv64" # limited by cargo
 license="Unlicense OR MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/kak-lsp/kak-lsp/archive/v$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/kbs2/APKBUILD b/testing/kbs2/APKBUILD
index d99c972f56e..e9de466f6c3 100644
--- a/testing/kbs2/APKBUILD
+++ b/testing/kbs2/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=kbs2
 pkgver=0.7.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Secret manager backed by age"
 url="https://github.com/woodruffw/kbs2"
 arch="all !s390x !riscv64" # blocked by cargo
 license="MIT"
-makedepends="cargo python3"
+makedepends="cargo python3 cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -22,7 +22,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 
 	./target/release/kbs2 --completions bash > kbs2.bash
 	./target/release/kbs2 --completions fish > kbs2.fish
diff --git a/testing/lapce/APKBUILD b/testing/lapce/APKBUILD
index 05e75353467..353d5865add 100644
--- a/testing/lapce/APKBUILD
+++ b/testing/lapce/APKBUILD
@@ -5,7 +5,7 @@
 #
 pkgname=lapce
 pkgver=0.2.5
-pkgrel=0
+pkgrel=1
 pkgdesc="Lightning-fast and Powerful Code Editor written in Rust"
 url="https://lapce.dev"
 # ppc64le: ring crate fails to build
@@ -15,6 +15,7 @@ arch="aarch64 x86_64"  # limited by rust/cargo
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	cmd:patchelf
 	fontconfig-dev
 	freetype-dev
@@ -107,10 +108,10 @@ prepare() {
 
 build() {
 	# Exclude feature lapce-data/updater.
-	cargo build -p lapce-ui --frozen --release --no-default-features \
+	cargo auditable build -p lapce-ui --frozen --release --no-default-features \
 		--features $(echo $_cargo_features | tr ' ' ',')
 
-	cargo build -p lapce-proxy --frozen --release
+	cargo auditable build -p lapce-proxy --frozen --release
 
 	# Add missing vulkan dependency.
 	patchelf --add-needed libvulkan.so.1 target/release/lapce
diff --git a/testing/laze/APKBUILD b/testing/laze/APKBUILD
index b697022a564..c5133445b6d 100644
--- a/testing/laze/APKBUILD
+++ b/testing/laze/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Kaspar Schleiser <kaspar@schleiser.de>
 pkgname=laze
 pkgver=0.1.15
-pkgrel=0
+pkgrel=1
 pkgdesc="laze is a build system based on Ninja, aiming to be the next goto-alternative to make"
 url="https://laze-build.org"
 arch="all"
 license="Apache-2.0"
 depends="ninja"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 checkdepends="xz"
 subpackages="$pkgname-doc
 	$pkgname-bash-completion
@@ -30,7 +30,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/librespot/APKBUILD b/testing/librespot/APKBUILD
index c4dd64569a2..75abb7fd290 100644
--- a/testing/librespot/APKBUILD
+++ b/testing/librespot/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer:
 pkgname=librespot
 pkgver=0.4.2
-pkgrel=2
+pkgrel=3
 pkgdesc="Open Source Spotify client library"
 url="https://github.com/librespot-org/librespot"
 arch="all !s390x !riscv64" # limited by cargo
 license="MIT"
 options="!check" # no test suite
-makedepends="cargo alsa-lib-dev"
+makedepends="cargo alsa-lib-dev cargo-auditable"
 install="$pkgname.pre-install"
 subpackages="$pkgname-openrc"
 source="librespot-$pkgver.tar.gz::https://github.com/librespot-org/librespot/archive/v$pkgver.tar.gz
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen \
+	cargo auditable build --release --frozen \
 		--features alsa-backend
 }
 
diff --git a/testing/lighthouse/APKBUILD b/testing/lighthouse/APKBUILD
index 8e6f0e53b05..eff5a2943c2 100644
--- a/testing/lighthouse/APKBUILD
+++ b/testing/lighthouse/APKBUILD
@@ -2,13 +2,14 @@
 # Maintainer: Oleg Titov <oleg.titov@gmail.com>
 pkgname=lighthouse
 pkgver=4.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Ethereum 2.0 Client"
 url="https://lighthouse.sigmaprime.io/"
 arch="x86_64 aarch64"  # limited by upstream
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	clang15-dev
 	cmake
 	openssl-dev
@@ -33,7 +34,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release \
+	cargo auditable build --release \
 		--frozen \
 		--package lighthouse \
 		--features "portable"
diff --git a/testing/lsd/APKBUILD b/testing/lsd/APKBUILD
index 0608b48023a..b0e75e4f330 100644
--- a/testing/lsd/APKBUILD
+++ b/testing/lsd/APKBUILD
@@ -2,18 +2,18 @@
 # Maintainer: Saijin-Naib <Saijin-Naib_package-maintenance@outlook.com>
 pkgname=lsd
 pkgver=0.23.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Next-Gen ls command"
 url="https://github.com/Peltoche/lsd"
 arch="all !riscv64" # blocked by cargo
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/Peltoche/$pkgname/archive/refs/tags/$pkgver/lsd-$pkgver.tar.gz"
 options="net" # needed for downloading dependencies
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/lumins/APKBUILD b/testing/lumins/APKBUILD
index 0cd0a96cb19..4fab0bfb086 100644
--- a/testing/lumins/APKBUILD
+++ b/testing/lumins/APKBUILD
@@ -2,19 +2,19 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=lumins
 pkgver=0.4.0
-pkgrel=1
+pkgrel=2
 pkgdesc="tool for local file synchronizing"
 url="https://github.com/wchang22/LuminS"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le"  #limited by rust/cargo
 options="!check" #Test are passing but creation of apkindex crashes
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/wchang22/LuminS/archive/refs/tags/v$pkgver.tar.gz"
 builddir="$srcdir/LuminS-$pkgver"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 package() {
diff --git a/testing/macchina/APKBUILD b/testing/macchina/APKBUILD
index 51217d34f70..37e43719e6e 100644
--- a/testing/macchina/APKBUILD
+++ b/testing/macchina/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Dominika Liberda <ja@sdomi.pl>
 pkgname=macchina
 pkgver=6.1.8
-pkgrel=0
+pkgrel=1
 pkgdesc="System information fetcher, with an (unhealthy) emphasis on performance"
 url="https://github.com/Macchina-CLI/macchina"
 # arm: needs https://github.com/Macchina-CLI/libmacchina/commit/1afd21de2d38b82cb2821259e260fcfc8d0cabc0
 arch="all !armhf !armv7 !x86 !s390x !riscv64" # s390x and riscv64 blocked by cargo
 license="MIT"
-makedepends="cargo sqlite-dev"
+makedepends="cargo sqlite-dev cargo-auditable"
 options="net"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/Macchina-CLI/macchina/archive/refs/tags/v$pkgver.tar.gz"
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/mdcat/APKBUILD b/testing/mdcat/APKBUILD
index 271436c9494..90d4e4d60d6 100644
--- a/testing/mdcat/APKBUILD
+++ b/testing/mdcat/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=mdcat
 pkgver=2.0.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Cat for markdown"
 url="https://github.com/swsnr/mdcat"
 #Undefined temporary symbol .LBB16_2
 arch="all !armhf"
 license="Apache-2.0"
-makedepends="asciidoctor cargo shared-mime-info openssl-dev>3"
+makedepends="asciidoctor cargo shared-mime-info openssl-dev>3 cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -31,7 +31,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/nitrocli/APKBUILD b/testing/nitrocli/APKBUILD
index ecdd96ec78d..14cfb92276b 100644
--- a/testing/nitrocli/APKBUILD
+++ b/testing/nitrocli/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer:
 pkgname=nitrocli
 pkgver=0.4.1
-pkgrel=2
+pkgrel=3
 pkgdesc="A command line tool for interacting with Nitrokey devices"
 url="https://github.com/d-e-s-o/nitrocli"
 arch="x86_64 x86 armhf armv7 aarch64 ppc64le" # limited by rust/cargo
 license="GPL-3.0-or-later"
 depends="gnupg"
 checkdepends="python3" # used by the extension tests
-makedepends="cargo hidapi-dev libnitrokey-dev"
+makedepends="cargo hidapi-dev libnitrokey-dev cargo-auditable"
 subpackages="$pkgname-doc $pkgname-bash-completion"
 source="https://github.com/d-e-s-o/nitrocli/archive/v$pkgver/nitrocli-$pkgver.tar.gz
 	src-tests-run.rs-use-python3.patch
@@ -18,7 +18,7 @@ source="https://github.com/d-e-s-o/nitrocli/archive/v$pkgver/nitrocli-$pkgver.ta
 
 build() {
 	export USE_SYSTEM_LIBNITROKEY=1
-	cargo build --release --locked
+	cargo auditable build --release --locked
 	cargo run --bin=shell-complete bash > nitrocli
 }
 
diff --git a/testing/nixpacks/APKBUILD b/testing/nixpacks/APKBUILD
index ede68181919..8de3a985b13 100644
--- a/testing/nixpacks/APKBUILD
+++ b/testing/nixpacks/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: Tomio <mail@tom1o.space>
 pkgname=nixpacks
 pkgver=0.1.7
-pkgrel=0
+pkgrel=1
 pkgdesc="Generate an OCI compliant image based off app source."
 url="https://github.com/railwayapp/nixpacks"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by alpine's integration/bootstrapping (https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/35671#note_243623)
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/railwayapp/nixpacks/archive/v$pkgver/$pkgname-$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release
+	cargo auditable build --release
 }
 
 check() {
diff --git a/testing/nsh/APKBUILD b/testing/nsh/APKBUILD
index 8f1611729aa..53256ba17d6 100644
--- a/testing/nsh/APKBUILD
+++ b/testing/nsh/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=nsh
 pkgver=0.4.2
-pkgrel=0
+pkgrel=1
 pkgdesc="A command-line shell like fish, but POSIX compatible"
 url="https://github.com/nuta/nsh"
 arch="aarch64 armhf armv7 ppc64le x86 x86_64"  # limited by rust/cargo
@@ -10,7 +10,7 @@ license="CC0-1.0 OR MIT"
 # bash is needed for completion
 depends="bash"
 checkdepends="python3 py3-termcolor"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 install="$pkgname.post-install $pkgname.pre-deinstall"
 subpackages="$pkgname-dbg"
 source="https://github.com/nuta/nsh/archive/v$pkgver/nsh-$pkgver.tar.gz"
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/nushell/APKBUILD b/testing/nushell/APKBUILD
index e2ce7bd8bce..43082f9b173 100644
--- a/testing/nushell/APKBUILD
+++ b/testing/nushell/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: nibon7 <nibon7@163.com>
 pkgname=nushell
 pkgver=0.80.0
-pkgrel=0
+pkgrel=1
 pkgdesc="A new type of shell"
 url="https://www.nushell.sh"
 # s390x: nix crate
 arch="all !s390x"
 license="MIT"
-makedepends="cargo openssl-dev>3 libx11-dev libxcb-dev libgit2-dev"
+makedepends="cargo openssl-dev>3 libx11-dev libxcb-dev libgit2-dev cargo-auditable"
 checkdepends="bash"
 subpackages="$pkgname-plugins:_plugins"
 install="$pkgname.post-install $pkgname.post-upgrade $pkgname.pre-deinstall"
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --workspace --release --frozen
+	cargo auditable build --workspace --release --frozen
 }
 
 check() {
diff --git a/testing/ouch/APKBUILD b/testing/ouch/APKBUILD
index 0cff383d28e..c9471607fea 100644
--- a/testing/ouch/APKBUILD
+++ b/testing/ouch/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=ouch
 pkgver=0.4.1
-pkgrel=1
+pkgrel=2
 pkgdesc="Painless compression and decompression"
 url="https://github.com/ouch-org/ouch"
 arch="all"
 license="MIT"
-makedepends="cargo bzip2-dev xz-dev zlib-dev zstd-dev"
+makedepends="cargo bzip2-dev xz-dev zlib-dev zstd-dev cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -31,7 +31,7 @@ prepare() {
 
 build() {
 	OUCH_ARTIFACTS_FOLDER=artifacts \
-		cargo build --frozen --release
+		cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/pastel/APKBUILD b/testing/pastel/APKBUILD
index dd54effc297..4437679a952 100644
--- a/testing/pastel/APKBUILD
+++ b/testing/pastel/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Joe Searle <joe@jsearle.net>
 pkgname=pastel
 pkgver=0.9.0
-pkgrel=0
+pkgrel=1
 pkgdesc="A command-line tool to generate, analyze, convert and manipulate colors"
 url="https://github.com/sharkdp/pastel"
 arch="all !s390x !riscv64" # rust/cargo
 license="Apache-2.0"
-makedepends="rust cargo"
+makedepends="rust cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/sharkdp/pastel/archive/v$pkgver.tar.gz"
 subpackages="
 	$pkgname-bash-completion
@@ -19,7 +19,7 @@ options="net" # fetch crates
 
 build() {
 	export SHELL_COMPLETIONS_DIR="$builddir/completions"
-	cargo build --release
+	cargo auditable build --release
 }
 
 check() {
diff --git a/testing/pidif/APKBUILD b/testing/pidif/APKBUILD
index 255257f1b84..420f5238c4a 100644
--- a/testing/pidif/APKBUILD
+++ b/testing/pidif/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Yo'av Moshe <alpine@yoavmoshe.com>
 pkgname=pidif
 pkgver=0.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple PDF Reader"
 url="https://github.com/bjesus/pidif"
 arch="all !s390x !riscv64" # rust
@@ -9,6 +9,7 @@ license="GPL-3.0-or-later"
 makedepends="
 	cairo-dev
 	cargo
+	cargo-auditable
 	gtk4.0-dev
 	poppler-dev
 	"
@@ -22,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/pijul/APKBUILD b/testing/pijul/APKBUILD
index 62d966e1c06..e64cb303ce4 100644
--- a/testing/pijul/APKBUILD
+++ b/testing/pijul/APKBUILD
@@ -3,13 +3,14 @@
 pkgname=pijul
 pkgver=1.0.0_beta2
 _pkgver=1.0.0-beta.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Patch-based distributed version control system"
 url="https://pijul.org/"
 arch="all !s390x !riscv64" # Limited by cargo
 license="GPL-2.0-or-later"
 makedepends="
 	cargo
+	cargo-auditable
 	libsodium-dev
 	nettle-dev
 	openssl-dev
@@ -29,7 +30,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/piping-server/APKBUILD b/testing/piping-server/APKBUILD
index bfaa6f262c0..b63f060f4e3 100644
--- a/testing/piping-server/APKBUILD
+++ b/testing/piping-server/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=piping-server
 pkgver=0.16.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Infinitely transfer data between devices over HTTP"
 url="https://github.com/nwtgck/piping-server-rust"
 license="MIT"
 arch="all !s390x !riscv64" # limited by cargo
 arch="$arch !ppc64le" # FTBFS
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="$pkgname-openrc"
 source="https://github.com/nwtgck/piping-server-rust/archive/v$pkgver/piping-server-rust-$pkgver.tar.gz
 	piping-server.initd
@@ -18,7 +18,7 @@ options="net" # fetch dependencies
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/please/APKBUILD b/testing/please/APKBUILD
index 2ce78718eb8..6641b2e19ad 100644
--- a/testing/please/APKBUILD
+++ b/testing/please/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Ed Neville <ed@s5h.net>
 pkgname=please
 pkgver=0.4.2
-pkgrel=1
+pkgrel=2
 pkgdesc="sudo alternative with regex support"
 url="https://gitlab.com/edneville/please"
 arch="all !s390x !riscv64" # limited by rust/cargo
 license="GPL-3.0-or-later"
-makedepends="cargo linux-pam-dev chrpath"
+makedepends="cargo linux-pam-dev chrpath cargo-auditable"
 source="https://gitlab.com/edneville/please/-/archive/v$pkgver/please-v$pkgver.tar.gz
 	please.pam
 	"
@@ -17,7 +17,7 @@ subpackages="$pkgname-doc"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/pulumi-watch/APKBUILD b/testing/pulumi-watch/APKBUILD
index d63a850a9af..f0f7f67e64c 100644
--- a/testing/pulumi-watch/APKBUILD
+++ b/testing/pulumi-watch/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=pulumi-watch
 pkgver=0.1.5
-pkgrel=1
+pkgrel=2
 pkgdesc="Helper utility for pulumi watch command"
 url="https://github.com/pulumi/watchutil-rs"
 # blocked by pulumi
 arch="x86_64 aarch64"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 depends="pulumi"
 source="$pkgname-$pkgver.tar.gz::https://github.com/pulumi/watchutil-rs/archive/refs/tags/v$pkgver.tar.gz"
 builddir="$srcdir/watchutil-rs-$pkgver"
@@ -22,7 +22,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/pw-volume/APKBUILD b/testing/pw-volume/APKBUILD
index 0feee5710bb..c62cbd8f204 100644
--- a/testing/pw-volume/APKBUILD
+++ b/testing/pw-volume/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=pw-volume
 pkgver=0.5.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Basic interface to PipeWire volume controls"
 url="https://github.com/smasher164/pw-volume"
 arch="all !s390x" # blocked by pipewire -> libcamera -> libcamera-ipa
 license="MIT"
 depends="cmd:pw-cli cmd:pw-dump"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/smasher164/pw-volume/archive/v$pkgver/pw-volume-$pkgver.tar.gz
 	update-lockfile.patch
 	"
@@ -31,7 +31,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/py-spy/APKBUILD b/testing/py-spy/APKBUILD
index 46d97073f75..f8375847ae5 100644
--- a/testing/py-spy/APKBUILD
+++ b/testing/py-spy/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: messense <messense@icloud.com>
 pkgname=py-spy
 pkgver=0.3.14
-pkgrel=0
+pkgrel=1
 pkgdesc="Sampling profiler for Python programs"
 url="https://github.com/benfred/py-spy"
 arch="aarch64 armv7 armhf x86_64 ppc64le" # limited by rust
 license="MIT"
-makedepends="cargo zlib-dev libunwind-dev xz-dev"
+makedepends="cargo zlib-dev libunwind-dev xz-dev cargo-auditable"
 checkdepends="python3 bash"
 subpackages="
 	$pkgname-doc
@@ -19,7 +19,7 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/benfred/py-spy/archive/v$pkg
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 
 	./target/release/py-spy completions bash > $pkgname.bash
 	./target/release/py-spy completions fish > $pkgname.fish
diff --git a/testing/rage/APKBUILD b/testing/rage/APKBUILD
index 9e573766cf0..a9c84571c5c 100644
--- a/testing/rage/APKBUILD
+++ b/testing/rage/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rage
 pkgver=0.9.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple, modern and secure encryption tool"
 url="https://github.com/str4d/rage"
 license="Apache-2.0 OR MIT"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo fuse3-dev"
+makedepends="cargo fuse3-dev cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --features mount
+	cargo auditable build --frozen --release --features mount
 
 	cargo run --frozen --release --example generate-docs
 	cargo run --frozen --release --example generate-completions
diff --git a/testing/rathole/APKBUILD b/testing/rathole/APKBUILD
index 6aabd7e93f5..36963e1a173 100644
--- a/testing/rathole/APKBUILD
+++ b/testing/rathole/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rathole
 pkgver=0.4.7
-pkgrel=0
+pkgrel=1
 pkgdesc="High-performance reverse proxy for NAT traversal"
 url="https://github.com/rapiz1/rathole"
 license="Apache-2.0"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 source="https://github.com/rapiz1/rathole/archive/v$pkgver/rathole-$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/rav1e/APKBUILD b/testing/rav1e/APKBUILD
index 6c740faf6a5..fb2ba47a4b9 100644
--- a/testing/rav1e/APKBUILD
+++ b/testing/rav1e/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Oleg Titov <oleg.titov@gmail.com>
 pkgname=rav1e
 pkgver=0.6.6
-pkgrel=0
+pkgrel=1
 pkgdesc="The fastest and safest AV1 encoder"
 url="https://github.com/xiph/rav1e"
 arch="all"
 license="BSD-2-Clause custom"
-makedepends="cargo cargo-c nasm"
+makedepends="cargo cargo-c nasm cargo-auditable"
 subpackages="$pkgname-static $pkgname-dev $pkgname-doc $pkgname-libs"
 source="$pkgname-$pkgver.tar.gz::https://github.com/xiph/rav1e/archive/v$pkgver.tar.gz
 	$pkgname-$pkgver.lock::https://github.com/xiph/rav1e/releases/download/v$pkgver/Cargo.lock
@@ -33,7 +33,7 @@ prepare() {
 build() {
 	export CARGO_PROFILE_RELEASE_OPT_LEVEL=3
 
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 	cargo cbuild \
 		--release \
 		--frozen \
diff --git a/testing/rbw/APKBUILD b/testing/rbw/APKBUILD
index d7eff798549..ee118967fa8 100644
--- a/testing/rbw/APKBUILD
+++ b/testing/rbw/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: crapStone <crapstone01@gmail.com>
 pkgname=rbw
 pkgver=1.7.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Unofficial command line client for Bitwarden."
 url="https://git.tozt.net/rbw"
 arch="all !s390x !riscv64 !ppc64le" # limited by cargo, dependency ring does not support ppc64le
 license="MIT"
 depends="pinentry"
-makedepends="rust cargo"
+makedepends="rust cargo cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 
 	target/release/rbw gen-completions bash > rbw.bash
 	target/release/rbw gen-completions fish > rbw.fish
diff --git a/testing/rdedup/APKBUILD b/testing/rdedup/APKBUILD
index 50128d6d840..846398be1fc 100644
--- a/testing/rdedup/APKBUILD
+++ b/testing/rdedup/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer:
 pkgname=rdedup
 pkgver=3.2.1
-pkgrel=2
+pkgrel=3
 pkgdesc="Data deduplication with compression and public key encryption"
 url="https://github.com/dpc/rdedup"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by cargo
 license="MPL-2.0"
-makedepends="cargo clang-dev libsodium-dev openssl-dev>3 xz-dev"
+makedepends="cargo clang-dev libsodium-dev openssl-dev>3 xz-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/dpc/rdedup/archive/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/rezolus/APKBUILD b/testing/rezolus/APKBUILD
index 3084e5ca9b9..7ce19b10be9 100644
--- a/testing/rezolus/APKBUILD
+++ b/testing/rezolus/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=rezolus
 pkgver=2.11.1
-pkgrel=2
+pkgrel=3
 pkgdesc="Systems performance telemetry"
 url="https://github.com/twitter/rezolus/"
 arch="x86_64 x86 armv7 armhf aarch64 ppc64le"  # limited by rust/cargo
 license="Apache-2.0"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 install="$pkgname.pre-install"
 subpackages="$pkgname-openrc $pkgname-doc"
 source="https://github.com/twitter/rezolus/archive/v$pkgver/rezolus-$pkgver.tar.gz
@@ -29,7 +29,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/riemann-cli/APKBUILD b/testing/riemann-cli/APKBUILD
index 732486f5b42..2df8100cd7e 100644
--- a/testing/riemann-cli/APKBUILD
+++ b/testing/riemann-cli/APKBUILD
@@ -4,12 +4,12 @@ pkgname=riemann-cli
 _projname=rust-riemann_client
 # CAUTION: Regenerate Cargo.lock when upgrading to a new version.
 pkgver=0.8.0
-pkgrel=1
+pkgrel=2
 pkgdesc="CLI client for Riemann written in Rust"
 url="https://github.com/borntyping/rust-riemann_client"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le"  # limited by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 # TODO: Convince upstream to include Cargo.lock in repository.
 source="https://github.com/borntyping/rust-riemann_client/archive/v$pkgver/$pkgname-$pkgver.tar.gz
 	no-unstable.patch
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/ripasso-cursive/APKBUILD b/testing/ripasso-cursive/APKBUILD
index ca189e4d072..0040dceecba 100644
--- a/testing/ripasso-cursive/APKBUILD
+++ b/testing/ripasso-cursive/APKBUILD
@@ -2,13 +2,14 @@
 pkgname=ripasso-cursive
 _pkgrelname=ripasso
 pkgver=0.6.4
-pkgrel=0
+pkgrel=1
 pkgdesc="A password manager that uses the file format of the standard unix password manager 'pass', implemented in rust."
 url="https://github.com/cortex/ripasso/"
 arch="all !s390x !riscv64 !armhf"
 license="GPL-3.0-or-later"
 makedepends="
 	cargo
+	cargo-auditable
 	clang-dev
 	gpgme-dev
 	libgpg-error-dev
@@ -28,7 +29,7 @@ prepare() {
 }
 
 build() {
-	cargo build -p ripasso-cursive --release --frozen
+	cargo auditable build -p ripasso-cursive --release --frozen
 }
 
 check() {
diff --git a/testing/rome/APKBUILD b/testing/rome/APKBUILD
index 583e22d498e..81f00ec70cb 100644
--- a/testing/rome/APKBUILD
+++ b/testing/rome/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rome
 pkgver=12.0.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Unified developer tools for JavaScript, TypeScript, and the web"
 url="https://rome.tools/"
 license="MIT"
 arch="aarch64 x86_64" # architectures supported by upstream
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/rome/tools/archive/cli/v$pkgver/rome-$pkgver.tar.gz"
 builddir="$srcdir/tools-cli-v$pkgver"
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	ROME_VERSION="$pkgver" cargo build -p rome_cli --frozen --release
+	ROME_VERSION="$pkgver" cargo auditable build -p rome_cli --frozen --release
 }
 
 check() {
diff --git a/testing/rosenpass/APKBUILD b/testing/rosenpass/APKBUILD
index 38c70b8aaad..c9aa62f2248 100644
--- a/testing/rosenpass/APKBUILD
+++ b/testing/rosenpass/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: guddaff <alpine@guddaff.de>
 pkgname=rosenpass
 pkgver=0.1.1
-pkgrel=2
+pkgrel=3
 pkgdesc="Formally verified, post-quantum secure VPN using WireGuard"
 url="https://rosenpass.eu/"
 license="MIT OR Apache-2.0"
 # armv7/riscv64 cmake fails (OQS), armhf build freezes
 arch="all !armv7 !armhf !riscv64 "
-makedepends="cargo clang-dev cmake libsodium-dev linux-headers"
+makedepends="cargo clang-dev cmake libsodium-dev linux-headers cargo-auditable"
 source="https://github.com/rosenpass/rosenpass/archive/v$pkgver/rosenpass-$pkgver.tar.gz"
 
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/rpg-cli/APKBUILD b/testing/rpg-cli/APKBUILD
index 2c5613d4ba9..8369e4ffede 100644
--- a/testing/rpg-cli/APKBUILD
+++ b/testing/rpg-cli/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rpg-cli
 pkgver=1.0.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Your filesystem as a dungeon!"
 url="https://github.com/facundoolano/rpg-cli"
 license="MIT"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/facundoolano/rpg-cli/archive/$pkgver/rpg-cli-$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/rss-email/APKBUILD b/testing/rss-email/APKBUILD
index 9e9218729e6..546f17b79a6 100644
--- a/testing/rss-email/APKBUILD
+++ b/testing/rss-email/APKBUILD
@@ -2,13 +2,14 @@
 pkgname=rss-email
 pkgdesc="Send RSS/Atom posts as email"
 pkgver=0.4.4
-pkgrel=0
+pkgrel=1
 url="https://git.sr.ht/~witcher/rss-email"
 # ppc64le, s390x, riscv64: rust-ring
 arch="all !ppc64le !s390x !riscv64"
 license="WTFPL"
 makedepends="
 	cargo
+	cargo-auditable
 	scdoc
 	"
 subpackages="$pkgname-doc"
@@ -24,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 	scdoc < docs/rss-email.1.scd > rss-email.1
 	scdoc < docs/rss-email.5.scd > rss-email.5
 }
diff --git a/testing/rust-bindgen/APKBUILD b/testing/rust-bindgen/APKBUILD
index 23144233c5b..f7520b19815 100644
--- a/testing/rust-bindgen/APKBUILD
+++ b/testing/rust-bindgen/APKBUILD
@@ -3,10 +3,10 @@
 
 pkgname=rust-bindgen
 pkgver=0.64.0
-pkgrel=0
+pkgrel=1
 pkgdesc="automatically generates Rust FFI bindings to C (and some C++) libraries"
 url="https://github.com/rust-lang/rust-bindgen"
-makedepends="cargo clang"
+makedepends="cargo clang cargo-auditable"
 arch="all"
 license="BSD-3-Clause"
 options="net !check" # no test
@@ -21,7 +21,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/rust-script/APKBUILD b/testing/rust-script/APKBUILD
index ac6c586d990..63f3e4c0823 100644
--- a/testing/rust-script/APKBUILD
+++ b/testing/rust-script/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rust-script
 pkgver=0.22.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Run Rust files and expressions as scripts without any setup or compilation step"
 url="https://rust-script.org/"
 license="Apache-2.0 OR MIT"
 arch="all !armhf" # tests hang
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/fornwall/rust-script/archive/$pkgver/rust-script-$pkgver.tar.gz"
 
 case "$CARCH" in
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/rustdesk-server/APKBUILD b/testing/rustdesk-server/APKBUILD
index acbc88ff4ad..53609609b73 100644
--- a/testing/rustdesk-server/APKBUILD
+++ b/testing/rustdesk-server/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: alealexpro100 <alealexn@gmail.com>
 pkgname=rustdesk-server
 pkgver=1.1.7
-pkgrel=0
+pkgrel=1
 pkgdesc="RustDesk Server Program"
 url="https://github.com/rustdesk/rustdesk-server"
 # ppc64le and s390x and riscv64 blocked by ring crate
 arch="all !ppc64le !s390x !riscv64"
 license="GPL-3.0-or-later"
 options="!check net" # RustDesk server has no tests yet
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="
 	$pkgname-openrc
 	"
@@ -29,7 +29,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/rustic/APKBUILD b/testing/rustic/APKBUILD
index 0ba2ec91c11..11886cc2568 100644
--- a/testing/rustic/APKBUILD
+++ b/testing/rustic/APKBUILD
@@ -3,13 +3,13 @@
 pkgname=rustic
 # NOTE: do not move out of the testing repository until upstream says it's no longer beta-quality software
 pkgver=0.5.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Fast, encrypted, deduplicated backups"
 url="https://github.com/rustic-rs/rustic"
 license="MIT OR Apache-2.0"
 arch="all !ppc64le !riscv64" # fails to build ring crate
 arch="$arch !s390x" # fails to build nix crate
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 
 	target/release/rustic completions bash > $pkgname.bash
 	target/release/rustic completions fish > $pkgname.fish
diff --git a/testing/rustscan/APKBUILD b/testing/rustscan/APKBUILD
index 6a43a9f325a..c6a8d30da9b 100644
--- a/testing/rustscan/APKBUILD
+++ b/testing/rustscan/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=rustscan
 pkgver=2.1.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Modern Port Scanner"
 url="https://github.com/RustScan/RustScan"
 license="GPL-3.0-or-later"
 # ppc64le and s390x and riscv64 blocked by ring crate
 # armhf timout while building
 arch="all !ppc64le !armhf !s390x !riscv64"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 checkdepends="bash perl python3"
 source="https://github.com/RustScan/RustScan/archive/$pkgver/rustscan-$pkgver.tar.gz
 	Cargo.lock.patch
@@ -25,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/rustypaste-cli/APKBUILD b/testing/rustypaste-cli/APKBUILD
index d00bce2f6dd..abe8ab614cf 100644
--- a/testing/rustypaste-cli/APKBUILD
+++ b/testing/rustypaste-cli/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Orhun Parmaksız <orhunparmaksiz@gmail.com>
 pkgname=rustypaste-cli
 pkgver=0.3.0
-pkgrel=0
+pkgrel=1
 pkgdesc="CLI tool for rustypaste"
 url="https://github.com/orhun/rustypaste-cli"
 # s390x, ppc64le, riscv64: blocked by ring crate
 arch="all !s390x !ppc64le !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="$pkgname-doc"
 options="net"
 source="$pkgname-$pkgver.tar.gz::https://github.com/orhun/rustypaste-cli/archive/v$pkgver.tar.gz"
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/rustypaste/APKBUILD b/testing/rustypaste/APKBUILD
index 0e59ec96931..bde7b1955cc 100644
--- a/testing/rustypaste/APKBUILD
+++ b/testing/rustypaste/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Orhun Parmaksız <orhunparmaksiz@gmail.com>
 pkgname=rustypaste
 pkgver=0.9.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Minimal file upload/pastebin service"
 url="https://github.com/orhun/rustypaste"
 # s390x, ppc64le, riscv64: blocked by ring crate
 arch="all !s390x !ppc64le !riscv64"
 license="MIT"
-makedepends="cargo zstd-dev openssl-dev"
+makedepends="cargo zstd-dev openssl-dev cargo-auditable"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/orhun/rustypaste/archive/v$pkgver.tar.gz"
 options="net"
@@ -30,7 +30,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --no-default-features --features openssl
+	cargo auditable build --frozen --release --no-default-features --features openssl
 }
 
 check() {
diff --git a/testing/scryer-prolog/APKBUILD b/testing/scryer-prolog/APKBUILD
index 0cd0b900173..b6b8554753e 100644
--- a/testing/scryer-prolog/APKBUILD
+++ b/testing/scryer-prolog/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Adrián Arroyo Calle <adrian.arroyocalle@gmail.com>
 pkgname=scryer-prolog
 pkgver=0.9.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Modern Prolog implementation written in Rust"
 url="https://github.com/mthom/scryer-prolog"
 # s390x, riscv64: rust
@@ -12,6 +12,7 @@ arch="aarch64 x86_64"
 license="BSD-3-Clause"
 makedepends="
 	cargo
+	cargo-auditable
 	gmp-dev
 	libsodium-dev
 	m4
@@ -35,7 +36,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/sd/APKBUILD b/testing/sd/APKBUILD
index 7fe99fb05d6..6ba5ddb667c 100644
--- a/testing/sd/APKBUILD
+++ b/testing/sd/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer:
 pkgname=sd
 pkgver=0.7.6
-pkgrel=2
+pkgrel=3
 pkgdesc="An intuitive find & replace CLI"
 url="https://github.com/chmln/sd"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust/cargo
 license="MIT"
 options="net"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/chmln/sd/archive/v$pkgver.tar.gz"
 subpackages="$pkgname-doc
 	$pkgname-bash-completion
@@ -19,7 +19,7 @@ subpackages="$pkgname-doc
 export CARGO_HOME="$srcdir"/cargo
 
 build() {
-	cargo build \
+	cargo auditable build \
 		--release \
 		--verbose
 }
diff --git a/testing/sequoia-chameleon-gnupg/APKBUILD b/testing/sequoia-chameleon-gnupg/APKBUILD
index 9dce8f8e15f..d7eb590a949 100644
--- a/testing/sequoia-chameleon-gnupg/APKBUILD
+++ b/testing/sequoia-chameleon-gnupg/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=sequoia-chameleon-gnupg
 pkgver=0.2.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Sequoia's reimplementation of the GnuPG interface"
 url="https://sequoia-pgp.org/"
 # ring
@@ -10,6 +10,7 @@ license="GPL-3.0-or-later"
 makedepends="
 	bzip2-dev
 	cargo
+	cargo-auditable
 	clang-dev
 	nettle-dev
 	openssl-dev
@@ -27,7 +28,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/sequoia-sqv/APKBUILD b/testing/sequoia-sqv/APKBUILD
index 490b704e39e..64843ccd6fa 100644
--- a/testing/sequoia-sqv/APKBUILD
+++ b/testing/sequoia-sqv/APKBUILD
@@ -2,13 +2,14 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=sequoia-sqv
 pkgver=1.1.0
-pkgrel=1
+pkgrel=2
 pkgdesc="simple signature verification program"
 url="https://sequoia-pgp.org/"
 arch="all"
 license="GPL-2.0-or-later"
 makedepends="
 	cargo
+	cargo-auditable
 	clang-dev
 	nettle-dev
 	"
@@ -31,7 +32,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/shotman/APKBUILD b/testing/shotman/APKBUILD
index 1a203b232a0..f07f6776b9a 100644
--- a/testing/shotman/APKBUILD
+++ b/testing/shotman/APKBUILD
@@ -1,14 +1,14 @@
 # Maintainer: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
 pkgname=shotman
 pkgver=0.4.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Uncompromising screenshot GUI for Wayland"
 url="https://git.sr.ht/~whynothugo/shotman"
 # s390x: nix/libc crate
 arch="all !s390x"
 license="ISC"
 depends="slurp"
-makedepends="cargo libxkbcommon-dev scdoc"
+makedepends="cargo libxkbcommon-dev scdoc cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -34,7 +34,7 @@ prepare() {
 
 build() {
 	export SHOTMAN_VERSION=$pkgver
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 	scdoc < shotman.1.scd > shotman.1
 	./target/release/shotman_completions bash > $pkgname.bash
 	./target/release/shotman_completions fish > $pkgname.fish
diff --git a/testing/signal-desktop/APKBUILD b/testing/signal-desktop/APKBUILD
index c23477c83a8..a3b47b2714d 100644
--- a/testing/signal-desktop/APKBUILD
+++ b/testing/signal-desktop/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=signal-desktop
 pkgver=6.18.1
-pkgrel=0
+pkgrel=1
 pkgdesc="A messaging app for simple private communication with friends"
 url="https://github.com/signalapp/Signal-Desktop/"
 # same as electron
@@ -20,6 +20,7 @@ makedepends="
 	alsa-lib-dev
 	bsd-compat-headers
 	cargo
+	cargo-auditable
 	cbindgen
 	clang-dev
 	cmake
@@ -319,7 +320,7 @@ build() {
 
 		msg "Building libringrtc"
 		OUTPUT_DIR="$srcdir"/ringrtc-$_ringrtcver/out \
-			cargo build --features electron --release
+			cargo auditable build --features electron --release
 
 		mkdir -p ../node/build/linux
 		cp -fv ../../out/release/libsignaldeswebrtc.so ../node/build/linux/libsignaldeswebrtc.so
@@ -357,7 +358,7 @@ build() {
 		cd "$srcdir"/Signal-FTS5-Extension-$_stokenizerver
 
 		msg "Building signal tokenizer"
-		cargo build --features extension --release --frozen
+		cargo auditable build --features extension --release --frozen
 		cbindgen --profile release . -o target/release/signal-tokenizer.h
 	)
 
diff --git a/testing/so/APKBUILD b/testing/so/APKBUILD
index 0c80e7479af..2082eeb81fd 100644
--- a/testing/so/APKBUILD
+++ b/testing/so/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=so
 pkgver=0.4.9
-pkgrel=0
+pkgrel=1
 pkgdesc="Terminal interface for Stackoverflow"
 url="https://github.com/samtay/so"
 arch="all"
 license="MIT"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/samtay/so/archive/refs/tags/v$pkgver.tar.gz"
 
 [ "$CARCH" = "riscv64" ] && options="$options textrels"
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/spotify-player/APKBUILD b/testing/spotify-player/APKBUILD
index 60e925b3acc..28a7a22da16 100644
--- a/testing/spotify-player/APKBUILD
+++ b/testing/spotify-player/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Thomas Kienlen <kommander@laposte.net>
 pkgname=spotify-player
 pkgver=0.12.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Command driven spotify player"
 url="https://github.com/aome510/spotify-player"
 arch="x86_64 aarch64 x86 ppc64le" # limited by rust/cargo, does not compile on armv7, armhf
@@ -10,6 +10,7 @@ license="MIT"
 makedepends="
 	alsa-lib-dev
 	cargo
+	cargo-auditable
 	dbus-dev
 	openssl-dev
 	wayland-dev
@@ -24,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen \
+	cargo auditable build --release --frozen \
 		--no-default-features --features 'alsa-backend,media-control,notify,streaming'
 }
 
diff --git a/testing/spotify-tui/APKBUILD b/testing/spotify-tui/APKBUILD
index f154546d74e..7ff2d342dec 100644
--- a/testing/spotify-tui/APKBUILD
+++ b/testing/spotify-tui/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Thomas Kienlen <kommander@laposte.net>
 pkgname=spotify-tui
 pkgver=0.25.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Spotify for the terminal written in Rust"
 url="https://github.com/Rigellute/spotify-tui"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust/cargo
 license="MIT"
-makedepends="rust cargo openssl-dev libxcb-dev python3"
+makedepends="rust cargo openssl-dev libxcb-dev python3 cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/Rigellute/spotify-tui/archive/v$pkgver/spotifyd-$pkgver.tar.gz
 	openssl3.patch
 	"
@@ -28,7 +28,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --locked --target-dir "target/"
+	cargo auditable build --release --locked --target-dir "target/"
 }
 
 check() {
diff --git a/testing/svgbob/APKBUILD b/testing/svgbob/APKBUILD
index 41d6c0dc7cd..7138a203727 100644
--- a/testing/svgbob/APKBUILD
+++ b/testing/svgbob/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Erwan Rouchet <lucidiot@brainshit.fr>
 pkgname=svgbob
 pkgver=0.6.6
-pkgrel=0
+pkgrel=1
 pkgdesc="Convert your ascii diagram scribbles into happy little SVG"
 url="https://github.com/ivanceras/svgbob"
 arch="all !s390x !riscv64" # limited by rust/cargo
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/ivanceras/svgbob/archive/$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/swayhide/APKBUILD b/testing/swayhide/APKBUILD
index 6d929f4c91d..fb29a751512 100644
--- a/testing/swayhide/APKBUILD
+++ b/testing/swayhide/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Edd Salkield <edd@salkield.uk>
 pkgname=swayhide
 pkgver=0.2.1
-pkgrel=0
+pkgrel=1
 pkgdesc="A window swallower for swaywm"
 url="https://github.com/NomisIV/swayhide/"
 arch="all !s390x !riscv64" # rust
 license="GPL-3.0-only"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/NomisIV/swayhide/archive/v$pkgver/swayhide-v$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/swc/APKBUILD b/testing/swc/APKBUILD
index 7691c8571e4..25ee279f28f 100644
--- a/testing/swc/APKBUILD
+++ b/testing/swc/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=swc
 pkgver=1.3.37
-pkgrel=0
+pkgrel=1
 pkgdesc="A super-fast TypeScript / JavaScript compiler written in Rust"
 url="https://swc.rs"
 # riscv64: it would take eternity to build
 arch="all !riscv64"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/swc-project/swc/archive/v$pkgver/$pkgname-$pkgver.tar.gz"
 builddir="$srcdir/$pkgname-$pkgver/bindings"
 # !check: TODO: run tests
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build -p swc_cli --release --locked
+	cargo auditable build -p swc_cli --release --locked
 }
 
 package() {
diff --git a/testing/swhkd/APKBUILD b/testing/swhkd/APKBUILD
index fc81a3231f3..ab101ef9bc7 100644
--- a/testing/swhkd/APKBUILD
+++ b/testing/swhkd/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=swhkd
 pkgver=1.2.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Sxhkd clone for Wayland"
 url="https://github.com/waycrate/swhkd"
 # s390x: fails to build due to libc crate
@@ -9,7 +9,7 @@ arch="all !s390x"
 license="BSD-2-Clause"
 # requires pkexec
 depends="polkit"
-makedepends="cargo scdoc"
+makedepends="cargo scdoc cargo-auditable"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/waycrate/swhkd/archive/refs/tags/$pkgver.tar.gz
 	lock.patch
@@ -29,7 +29,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen --bins
+	cargo auditable build --release --frozen --bins
 
 	mkdir -p man/man5
 	mkdir -p man/man1
diff --git a/testing/swww/APKBUILD b/testing/swww/APKBUILD
index bbad6303a74..072667b372e 100644
--- a/testing/swww/APKBUILD
+++ b/testing/swww/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=swww
 pkgver=0.7.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Efficient animated wallpaper daemon for Wayland compositors"
 url="https://github.com/Horus645/swww"
 arch="all !s390x !riscv64" # Build failed
 license="GPL-3.0-or-later"
-makedepends="scdoc cargo libxkbcommon-dev wayland-dev"
+makedepends="scdoc cargo libxkbcommon-dev wayland-dev cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 	sh ./doc/gen.sh
 }
 
diff --git a/testing/synapse-bt/APKBUILD b/testing/synapse-bt/APKBUILD
index 1157d63102f..29796e23e33 100644
--- a/testing/synapse-bt/APKBUILD
+++ b/testing/synapse-bt/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: prspkt <prspkt@protonmail.com>
 pkgname=synapse-bt
 pkgver=1.0
-pkgrel=3
+pkgrel=4
 pkgdesc="Flexible and fast BitTorrent daemon"
 url="https://github.com/Luminarys/synapse"
 arch="all !aarch64 !s390x !riscv64" # Cargo (aarch64 due to MAP_32BIT)
 license="ISC"
 pkgusers="synapse-bt"
 pkggroups="synapse-bt"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 install="synapse-bt.pre-install"
 subpackages="$pkgname-openrc $pkgname-cli:cli"
 source="synapse-bt-$pkgver.tar.gz::https://github.com/Luminarys/synapse/archive/$pkgver.tar.gz
@@ -20,7 +20,7 @@ builddir="$srcdir"/synapse-$pkgver
 
 
 build() {
-	cargo build --release --all --locked
+	cargo auditable build --release --all --locked
 }
 
 check() {
diff --git a/testing/systeroid/APKBUILD b/testing/systeroid/APKBUILD
index 842c45fe652..b90aa56fde5 100644
--- a/testing/systeroid/APKBUILD
+++ b/testing/systeroid/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: omni <omni+alpine@hack.org>
 pkgname=systeroid
 pkgver=0.4.1
-pkgrel=0
+pkgrel=1
 pkgdesc="A more powerful alternative to sysctl(8)"
 # riscv64: rust broken
 arch="all !riscv64"
 url="https://systeroid.cli.rs/"
 license="Apache-2.0"
-makedepends="cargo libxcb-dev"
+makedepends="cargo libxcb-dev cargo-auditable"
 checkdepends="linux-lts-doc xclip"
 subpackages="$pkgname-doc $pkgname-tui:_tui $pkgname-tui-doc:_tui_doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/orhun/systeroid/archive/refs/tags/v$pkgver.tar.gz"
@@ -29,11 +29,11 @@ build() {
 	case "$CARCH" in
 	s390x)
 		# Fail to build nix crate
-		cargo build --release --frozen -p systeroid
-		cargo build --release --frozen --no-default-features -p systeroid-tui
+		cargo auditable build --release --frozen -p systeroid
+		cargo auditable build --release --frozen --no-default-features -p systeroid-tui
 		;;
 	*)
-		cargo build --release --frozen
+		cargo auditable build --release --frozen
 		;;
 	esac
 }
diff --git a/testing/tauri-cli/APKBUILD b/testing/tauri-cli/APKBUILD
index eff616f38aa..d81c9b7be42 100644
--- a/testing/tauri-cli/APKBUILD
+++ b/testing/tauri-cli/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=tauri-cli
 pkgver=1.3.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Tauri cargo cli tool"
 url="https://github.com/tauri-apps/tauri"
 # tauri doesn't support the others anyway
 arch="aarch64 armv7 x86 x86_64"
 license="Apache-2.0 OR MIT"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/tauri-apps/tauri/releases/download/cli.rs-v$pkgver/cli.rs-$pkgver.crate"
 options="net !check" # no tests
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/tealdeer/APKBUILD b/testing/tealdeer/APKBUILD
index 50ab350c83c..2503c8cecf5 100644
--- a/testing/tealdeer/APKBUILD
+++ b/testing/tealdeer/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=tealdeer
 pkgver=1.6.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Very fast implementation of tldr in Rust"
 url="https://dbrgn.github.io/tealdeer/"
 arch="all"
 license="MIT AND Apache-2.0"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/teapot-tools/APKBUILD b/testing/teapot-tools/APKBUILD
index d38dbff5ae4..e6555e94259 100644
--- a/testing/teapot-tools/APKBUILD
+++ b/testing/teapot-tools/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=teapot-tools
 pkgver=0.4.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Replacement for depot_tools (gclient) and luci-go (cipd)"
 url="https://codeberg.org/selfisekai/teapot_tools"
 # armhf: ci hangs
@@ -13,10 +13,11 @@ license="Apache-2.0"
 depends="git"
 makedepends="
 	cargo
+	cargo-auditable
 	openssl-dev
 	protoc
 	python3-dev
-"
+	"
 source="teapot_tools-$pkgver.tar.gz::https://codeberg.org/selfisekai/teapot_tools/archive/v$pkgver.tar.gz"
 builddir="$srcdir/teapot_tools"
 
@@ -28,8 +29,8 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --bin download_from_google_storage
-	cargo build --frozen --release --bin gclient
+	cargo auditable build --frozen --release --bin download_from_google_storage
+	cargo auditable build --frozen --release --bin gclient
 }
 
 check() {
diff --git a/testing/texlab/APKBUILD b/testing/texlab/APKBUILD
index 27727a14b65..ec2e4a6309c 100644
--- a/testing/texlab/APKBUILD
+++ b/testing/texlab/APKBUILD
@@ -2,14 +2,14 @@
 # Contributor: Dominika Liberda <ja@sdomi.pl>
 pkgname=texlab
 pkgver=5.6.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Implementation of the Language Server Protocol for LaTeX"
 url="https://github.com/latex-lsp/texlab"
 # limited by rust/cargo
 # armhf - fails to build
 arch="x86_64 armv7 aarch64 x86 ppc64le"
 license="GPL-3.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/latex-lsp/texlab/archive/refs/tags/v$pkgver/texlab-v$pkgver.tar.gz"
 
 # tests OOM on 32-bit
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/topgrade/APKBUILD b/testing/topgrade/APKBUILD
index 623e6ade23d..19bbfae53af 100644
--- a/testing/topgrade/APKBUILD
+++ b/testing/topgrade/APKBUILD
@@ -3,12 +3,12 @@
 # Maintainer: Sean McAvoy <seanmcavoy@gmail.com>
 pkgname=topgrade
 pkgver=11.0.2
-pkgrel=0
+pkgrel=1
 pkgdesc="run upgrades of packages in OS and other package managers"
 url="https://github.com/topgrade-rs/topgrade"
 arch="all !s390x !riscv64"
 license="GPL-3.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 
 	target/release/topgrade --gen-completion bash > topgrade.bash
 	target/release/topgrade --gen-completion fish > topgrade.fish
diff --git a/testing/ttyper/APKBUILD b/testing/ttyper/APKBUILD
index 592a3bcfda1..6fe1b896441 100644
--- a/testing/ttyper/APKBUILD
+++ b/testing/ttyper/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Cowington Post <cowingtonpost@gmail.com>
 pkgname=ttyper
 pkgver=1.2.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Terminal-based typing test"
 url="https://github.com/max-niederman/ttyper/"
 arch="all"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/max-niederman/ttyper/archive/refs/tags/v$pkgver/ttyper-$pkgver.tar.gz"
 
 case "$CARCH" in
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/twiggy/APKBUILD b/testing/twiggy/APKBUILD
index 0ff558ce967..aed853fc18d 100644
--- a/testing/twiggy/APKBUILD
+++ b/testing/twiggy/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: TBK <alpine@jjtc.eu>
 pkgname=twiggy
 pkgver=0.6.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Twiggy a code size profiler for Wasm"
 url="https://github.com/rustwasm/twiggy"
 arch="all !s390x !riscv64" # Limited by cargo
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/rustwasm/twiggy/archive/$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/typst-lsp/APKBUILD b/testing/typst-lsp/APKBUILD
index d560c4fa232..64523e1f7cb 100644
--- a/testing/typst-lsp/APKBUILD
+++ b/testing/typst-lsp/APKBUILD
@@ -1,14 +1,14 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=typst-lsp
 pkgver=0.5.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Language server for typst"
 url="https://github.com/nvarner/typst-lsp"
 # typst, rust-analyzer
 arch="aarch64 ppc64le x86_64"
 license="MIT"
 depends="rust-analyzer"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/nvarner/typst-lsp/archive/refs/tags/v$pkgver.tar.gz"
 options="net !check" # no tests
 
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/typst/APKBUILD b/testing/typst/APKBUILD
index 3ed74bfced7..6460e45dce0 100644
--- a/testing/typst/APKBUILD
+++ b/testing/typst/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=typst
 pkgver=0.4.0
-pkgrel=0
+pkgrel=1
 pkgdesc="New markup-based typesetting system that is powerful and easy to learn"
 url="https://github.com/typst/typst"
 # s390x: 90% of tests fail due to endianness
@@ -11,6 +11,7 @@ arch="all !s390x !ppc64le !riscv64 !armhf"
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	"
 subpackages="
 	$pkgname-doc
@@ -47,7 +48,7 @@ build() {
 	# so, just keep them vendored-in for now. when fixed, add
 	# --no-default-features
 	GEN_ARTIFACTS="./gen" \
-		cargo build --release --frozen -p typst-cli
+		cargo auditable build --release --frozen -p typst-cli
 }
 
 check() {
diff --git a/testing/udpt/APKBUILD b/testing/udpt/APKBUILD
index beb6f1c4f20..3ed8319e1c6 100644
--- a/testing/udpt/APKBUILD
+++ b/testing/udpt/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Thomas Kienlen <kommander@laposte.net>
 pkgname=udpt
 pkgver=3.1.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Lightweight UDP torrent tracker"
 url="https://github.com/naim94a/udpt"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 pkgusers="udpt"
 pkggroups="udpt"
 install="udpt.pre-install"
@@ -21,7 +21,7 @@ builddir="$srcdir/udpt-udpt-$pkgver"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/unmake/APKBUILD b/testing/unmake/APKBUILD
index e3a4d2b244d..c70d6ee998a 100644
--- a/testing/unmake/APKBUILD
+++ b/testing/unmake/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=unmake
 pkgver=0.0.12
-pkgrel=0
+pkgrel=1
 pkgdesc="POSIX Makefile linter"
 url="https://github.com/mcandre/unmake"
 arch="all"
 license="BSD-2-Clause"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/mcandre/unmake/archive/refs/tags/v$pkgver.tar.gz"
 # cargo fetch
 options="net"
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/uutils-coreutils/APKBUILD b/testing/uutils-coreutils/APKBUILD
index 06587b8664a..f5cc96f42ec 100644
--- a/testing/uutils-coreutils/APKBUILD
+++ b/testing/uutils-coreutils/APKBUILD
@@ -2,14 +2,14 @@
 pkgname=uutils-coreutils
 _pkgname=coreutils
 pkgver=0.0.18
-pkgrel=0
+pkgrel=1
 pkgdesc="coreutils rewritten in Rust"
 # s390x: some endianness failure
 # riscv64: rust broken
 arch="all !s390x !riscv64"
 url="https://github.com/uutils/coreutils"
 license="MIT"
-makedepends="cargo help2man oniguruma-dev"
+makedepends="cargo help2man oniguruma-dev cargo-auditable"
 checkdepends="coreutils" # test_ls.rs incompatible with busybox truncate
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/uutils/coreutils/archive/$pkgver.tar.gz"
@@ -33,7 +33,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 
 	mkdir bin
 	cp target/release/"$_pkgname" bin/uutils
diff --git a/testing/vaultwarden/APKBUILD b/testing/vaultwarden/APKBUILD
index 81a1aabd806..f236e8ba2f9 100644
--- a/testing/vaultwarden/APKBUILD
+++ b/testing/vaultwarden/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Chris Kruger <alpine@krugerheavyindustries.com>
 pkgname=vaultwarden
 pkgver=1.28.1
-pkgrel=0
+pkgrel=1
 pkgdesc="bitwarden alternative backend"
 _bw_web_ver=2023.3.0
 provides="bitwarden_rs=$pkgver-r$pkgrel"
@@ -12,6 +12,7 @@ arch="all !ppc64le !s390x !riscv64" # ring crate has platform specific asm - no
 license="AGPL-3.0-only"
 makedepends="
 	cargo
+	cargo-auditable
 	libpq-dev
 	mariadb-dev
 	mimalloc2-dev
@@ -45,7 +46,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --features sqlite,postgresql,mysql,enable_mimalloc --frozen
+	cargo auditable build --release --features sqlite,postgresql,mysql,enable_mimalloc --frozen
 }
 
 check() {
diff --git a/testing/vector/APKBUILD b/testing/vector/APKBUILD
index a37a9cedb8d..6ccd07d5e7b 100644
--- a/testing/vector/APKBUILD
+++ b/testing/vector/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=vector
 pkgver=0.29.1
-pkgrel=0
+pkgrel=1
 pkgdesc="High-performance observability data pipeline"
 url="https://vector.dev/"
 # s390x, ppc64le, riscv64: blocked by ring crate
@@ -10,6 +10,7 @@ arch="all !s390x !ppc64le !riscv64 !x86 !armhf !armv7"
 license="MPL-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	cmake
 	librdkafka-dev
 	openssl-dev
@@ -35,12 +36,12 @@ export OPENSSL_NO_VENDOR=1
 prepare() {
 	default_prepare
 
-	# "cargo build" still tries to pull dependencies for other platforms
+	# "cargo auditable build" still tries to pull dependencies for other platforms
 	cargo fetch --locked
 }
 
 build() {
-	cargo build \
+	cargo auditable build \
 		--release \
 		--frozen \
 		--no-default-features \
diff --git a/testing/verco/APKBUILD b/testing/verco/APKBUILD
index 04bb1cbac01..18bce062a42 100644
--- a/testing/verco/APKBUILD
+++ b/testing/verco/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: omni <omni+alpine@hack.org>
 pkgname=verco
 pkgver=6.12.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple Git/Mercurial/PlasticSCM tui client based on keyboard shortcuts"
 arch="all !s390x !riscv64" # limited by cargo
 url="https://github.com/vamolessa/verco"
 license="GPL-3.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 options="!check" # No tests
 source="$pkgname-$pkgver.tar.gz::https://github.com/vamolessa/verco/archive/refs/tags/v$pkgver.tar.gz"
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/vivid/APKBUILD b/testing/vivid/APKBUILD
index 5014219364e..d3083ab10c4 100644
--- a/testing/vivid/APKBUILD
+++ b/testing/vivid/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=vivid
 pkgver=0.9.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Themeable LS_COLORS generator with a rich filetype database"
 url="https://github.com/sharkdp/vivid"
 arch="all"
 license="Apache-2.0 AND MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/sharkdp/vivid/archive/refs/tags/v$pkgver.tar.gz"
 
 export CARGO_PROFILE_RELEASE_OPT_LEVEL="z"
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/vocage/APKBUILD b/testing/vocage/APKBUILD
index dda37379d80..2d4fb44a60e 100644
--- a/testing/vocage/APKBUILD
+++ b/testing/vocage/APKBUILD
@@ -1,18 +1,18 @@
 # Maintainer: Krystian Chachuła <krystian@krystianch.com>
 pkgname=vocage
 pkgver=1.1.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Minimalistic terminal-based vocabulary-learning tool"
 url="https://github.com/proycon/vocage"
 arch="all !s390x !riscv64"
 license="GPL-3.0-or-later"
-makedepends="rust cargo"
+makedepends="rust cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/proycon/vocage/archive/refs/tags/v$pkgver.tar.gz"
 options="!check" # No test suite / unit tests
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 package() {
diff --git a/testing/wasmtime/APKBUILD b/testing/wasmtime/APKBUILD
index a23004a22b1..7fac2b9c092 100644
--- a/testing/wasmtime/APKBUILD
+++ b/testing/wasmtime/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Patrycja Rosa <alpine@ptrcnull.me>
 pkgname=wasmtime
 pkgver=9.0.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Fast and secure runtime for WebAssembly"
 url="https://wasmtime.dev/"
 # others unsupported
 arch="aarch64 x86_64"
 license="Apache-2.0"
 depends_dev="libwasmtime=$pkgver-r$pkgrel"
-makedepends="cargo rust-wasm zstd-dev"
+makedepends="cargo rust-wasm zstd-dev cargo-auditable"
 subpackages="libwasmtime $pkgname-dev"
 source="https://github.com/bytecodealliance/wasmtime/releases/download/v$pkgver/wasmtime-v$pkgver-src.tar.gz
 	system-zstd.patch
@@ -42,8 +42,8 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
-	cargo build --frozen --release --manifest-path crates/c-api/Cargo.toml
+	cargo auditable build --frozen --release
+	cargo auditable build --frozen --release --manifest-path crates/c-api/Cargo.toml
 }
 
 check() {
diff --git a/testing/watchexec/APKBUILD b/testing/watchexec/APKBUILD
index 4845d43e1b4..721e74c3213 100644
--- a/testing/watchexec/APKBUILD
+++ b/testing/watchexec/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer:
 pkgname=watchexec
 pkgver=1.22.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Executes commands in response to file modifications"
 url="https://github.com/watchexec/watchexec"
 # arm: fails to build
 # error: Undefined temporary symbol .LBB33_2
 arch="x86_64 x86 aarch64 ppc64le" # limited by rust/cargo
 license="Apache-2.0"
-makedepends="cargo dbus-dev"
+makedepends="cargo dbus-dev cargo-auditable"
 checkdepends="bash"
 subpackages="$pkgname-doc
 	$pkgname-zsh-completion
@@ -33,7 +33,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/waylevel/APKBUILD b/testing/waylevel/APKBUILD
index a097233d438..3ff571f9eed 100644
--- a/testing/waylevel/APKBUILD
+++ b/testing/waylevel/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=waylevel
 pkgver=1.0.0
-pkgrel=0
+pkgrel=1
 pkgdesc="A tool to print Wayland toplevels status and info"
 url="https://git.sr.ht/~shinyzenith/waylevel"
 # s390x: nix crate fails to build
@@ -12,6 +12,7 @@ license="BSD-2-Clause"
 depends="wayland-libs-client"
 makedepends="
 	cargo
+	cargo-auditable
 	wayland-dev
 	"
 source="$pkgname-$pkgver.tar.gz::https://git.sr.ht/~shinyzenith/waylevel/archive/$pkgver.tar.gz"
@@ -25,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/weggli/APKBUILD b/testing/weggli/APKBUILD
index b31ca046878..6337128a56a 100644
--- a/testing/weggli/APKBUILD
+++ b/testing/weggli/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=weggli
 pkgver=0.2.4
-pkgrel=0
+pkgrel=1
 pkgdesc="Semantic search tool for C and C++ codebases"
 url="https://github.com/googleprojectzero/weggli"
 license="Apache-2.0"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/googleprojectzero/weggli/archive/v$pkgver/weggli-$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/wk-adblock/APKBUILD b/testing/wk-adblock/APKBUILD
index 7b9fe9d1c4b..1d2f723bf3f 100644
--- a/testing/wk-adblock/APKBUILD
+++ b/testing/wk-adblock/APKBUILD
@@ -2,13 +2,13 @@
 pkgname=wk-adblock
 pkgver=0.0.4
 _commit=665ffb4126ae924e345d04adcf6242066216a508
-pkgrel=4
+pkgrel=5
 pkgdesc="Simple ad-blocker for Webkit2 Webview"
 options="!check" # No testsuite
 url="https://github.com/DavidVentura/webextension-adblocker/"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust
 license="GPL-3.0-or-later"
-makedepends="cargo clang-dev glib-dev llvm-dev webkit2gtk-4.1-dev"
+makedepends="cargo clang-dev glib-dev llvm-dev webkit2gtk-4.1-dev cargo-auditable"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://codeload.github.com/DavidVentura/webextension-adblocker/tar.gz/$_commit
 	cargo-lock.patch
@@ -28,7 +28,7 @@ prepare() {
 
 build() {
 	cd wk-we-adblock
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/wpaperd/APKBUILD b/testing/wpaperd/APKBUILD
index c5bf5126cd3..29daf41beac 100644
--- a/testing/wpaperd/APKBUILD
+++ b/testing/wpaperd/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=wpaperd
 pkgver=0.3.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Wallpaper daemon for Wayland"
 url="https://github.com/danyspin97/wpaperd"
 license="GPL-3.0-or-later"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo libxkbcommon-dev scdoc"
+makedepends="cargo libxkbcommon-dev scdoc cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 
 	scdoc <man/wpaperd-output.5.scd >man/wpaperd-output.5
 }
diff --git a/testing/xendmail/APKBUILD b/testing/xendmail/APKBUILD
index 556150069de..edcee1084eb 100644
--- a/testing/xendmail/APKBUILD
+++ b/testing/xendmail/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
 pkgname=xendmail
 pkgver=0.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Like sendmail, for users"
 url="https://git.sr.ht/~whynothugo/xendmail"
 # rust-ring
 arch="all !s390x !ppc64le !riscv64"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="xendmail-$pkgver.tar.gz::https://git.sr.ht/~whynothugo/xendmail/archive/v$pkgver.tar.gz"
 builddir="$srcdir/$pkgname-v$pkgver"
 options="net" # fetch dependencies
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/xplr/APKBUILD b/testing/xplr/APKBUILD
index b3f91425df7..d14c4709162 100644
--- a/testing/xplr/APKBUILD
+++ b/testing/xplr/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Jakub Panek <me@panekj.dev>
 pkgname=xplr
 pkgver=0.21.1
-pkgrel=0
+pkgrel=1
 pkgdesc="A hackable, minimal, fast TUI file explorer"
 url="https://xplr.dev"
 # s390x, riscv64: rust
 # ppc64le: luajit
 arch="all !ppc64le !s390x !riscv64"
 license="MIT"
-makedepends="cargo luajit-dev"
+makedepends="cargo luajit-dev cargo-auditable"
 options="net"
 source="
 	https://github.com/sayanarijit/xplr/archive/refs/tags/v$pkgver/xplr-$pkgver.tar.gz
@@ -24,11 +24,11 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --offline --release
+	cargo auditable build --frozen --offline --release
 }
 
 check() {
-	cargo build --frozen --offline
+	cargo auditable build --frozen --offline
 	# cargo test doesn't build target/debug/xplr binary
 	cargo test --frozen
 }
diff --git a/testing/xremap-sway/APKBUILD b/testing/xremap-sway/APKBUILD
index afa637ca9bf..85ec6168547 100644
--- a/testing/xremap-sway/APKBUILD
+++ b/testing/xremap-sway/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Coco Liliace <chloe@liliace.dev>
 pkgname=xremap-sway
 pkgver=0.8.5
-pkgrel=0
+pkgrel=1
 pkgdesc="Key remapper for X11 and Wayland"
 url="https://github.com/k0kubun/xremap"
 # nix
 arch="all !s390x !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/k0kubun/xremap/archive/v$pkgver.tar.gz"
 builddir="$srcdir/xremap-$pkgver"
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --features sway
+	cargo auditable build --frozen --release --features sway
 }
 
 check() {
diff --git a/testing/youki/APKBUILD b/testing/youki/APKBUILD
index 6c41908c80d..9f7f9b533c7 100644
--- a/testing/youki/APKBUILD
+++ b/testing/youki/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=youki
 pkgver=0.0.4
-pkgrel=0
+pkgrel=1
 pkgdesc="A container runtime written in Rust"
 url="https://github.com/containers/youki"
 # ppc64le: syscalls crate inline asm is unstable for ppc64le
@@ -12,6 +12,7 @@ arch="all !ppc64le !s390x !riscv64"
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	dbus-dev
 	libgit2-dev
 	libseccomp-dev
@@ -34,7 +35,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/zkgroup/APKBUILD b/testing/zkgroup/APKBUILD
index d195ac94f0c..8071f771c78 100644
--- a/testing/zkgroup/APKBUILD
+++ b/testing/zkgroup/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: Siva Mahadevan <me@svmhdvn.name>
 pkgname=zkgroup
 pkgver=0.9.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Library for the Signal Private Group System"
 url="https://github.com/signalapp/zkgroup"
 arch="all !s390x !ppc64le !riscv64" # limited by cargo
 license="GPL-3.0-only"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/signalapp/zkgroup/archive/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/zsh-histdb-skim/APKBUILD b/testing/zsh-histdb-skim/APKBUILD
index 3011c50334e..69102221ccd 100644
--- a/testing/zsh-histdb-skim/APKBUILD
+++ b/testing/zsh-histdb-skim/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=zsh-histdb-skim
 pkgver=0.8.5
-pkgrel=0
+pkgrel=1
 pkgdesc="A zsh histdb browser using skim"
 url="https://github.com/m42e/zsh-histdb-skim"
 # riscv64: textrels
@@ -12,6 +12,7 @@ license="MIT"
 depends="zsh-histdb"
 makedepends="
 	cargo
+	cargo-auditable
 	sqlite-dev
 	"
 source="https://github.com/m42e/zsh-histdb-skim/archive/v$pkgver/zsh-histdb-skim-$pkgver.tar.gz
@@ -25,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {