diff --git a/testing/agate/APKBUILD b/testing/agate/APKBUILD
index e1e3b03af4f446dccd934b2ea7a68d60021fbc6a..6d72214a268e6d281537cf46a6557dac70f257c5 100644
--- a/testing/agate/APKBUILD
+++ b/testing/agate/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Cowington Post <cowingtonpost@gmail.com>
 pkgname=agate
 pkgver=3.3.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple Gemini server for static files"
 url="https://github.com/mbrubeck/agate"
 # rust-ring
 arch="all !s390x !ppc64le !riscv64"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 install="$pkgname.pre-install"
 subpackages="$pkgname-openrc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/mbrubeck/agate/archive/refs/tags/v$pkgver.tar.gz
@@ -22,7 +22,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release
+	cargo auditable build --release
 }
 
 check() {
diff --git a/testing/android-apkeep/APKBUILD b/testing/android-apkeep/APKBUILD
index 8575696de4a4f8bab9cd8e404bb021a6883f9ec0..1c00af609cb64c9d58b574bbe94a292500fa7862 100644
--- a/testing/android-apkeep/APKBUILD
+++ b/testing/android-apkeep/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=android-apkeep
 pkgver=0.15.0
-pkgrel=0
+pkgrel=1
 pkgdesc="A command-line tool for downloading Android APK files from various sources"
 url="https://github.com/EFForg/apkeep"
 # ppc64le, riscv64, s390x: ring crate
@@ -11,6 +11,7 @@ license="MIT"
 makedepends="
 	bzip2-dev
 	cargo
+	cargo-auditable
 	openssl-dev
 	zstd-dev
 	"
@@ -37,7 +38,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 package() {
diff --git a/testing/apmpkg/APKBUILD b/testing/apmpkg/APKBUILD
index 7b3d2b908696f4018e8f28720c503508e2552bfa..4e1da505fbd58a96073405e4b68ca4aac3b2ed26 100644
--- a/testing/apmpkg/APKBUILD
+++ b/testing/apmpkg/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: kedap <kedap.dev@protonmail.com>
 pkgname=apmpkg
 pkgver=1.5.1
-pkgrel=1
+pkgrel=2
 pkgdesc="A Package Manager as a model: PKGBUILD"
 url="https://github.com/kedap/apmpkg"
 # armhf: test timeout
@@ -10,7 +10,7 @@ url="https://github.com/kedap/apmpkg"
 arch="all !s390x !armhf !riscv64"
 license="Apache-2.0"
 depends="git fakeroot wget ruby-bundler py3-pip bash ruby-dev npm"
-makedepends="cargo openssl-dev>3 patchutils"
+makedepends="cargo openssl-dev>3 patchutils cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -23,7 +23,7 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/Kedap/apmpkg/archive/refs/ta
 
 
 build() {
-	cargo build --release --locked --verbose
+	cargo auditable build --release --locked --verbose
 }
 
 check() {
diff --git a/testing/asciinema-rs/APKBUILD b/testing/asciinema-rs/APKBUILD
index a86307eeafd6de8c5e04c09e388f0eb08dcce3d1..2e77d07691c5644b77ef86b87435d64002838579 100644
--- a/testing/asciinema-rs/APKBUILD
+++ b/testing/asciinema-rs/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: TBK <alpine@jjtc.eu>
 pkgname=asciinema-rs
 pkgver=0.5.1
-pkgrel=2
+pkgrel=3
 pkgdesc="A reimplementation of the asciinema command line program written in Rust."
 url="https://github.com/LegNeato/asciinema-rs"
 arch="x86_64" # Limited by cargo
 license="Apache-2.0 MIT"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 source="https://github.com/LegNeato/asciinema-rs/archive/v$pkgver/asciinema-rs-v$pkgver.tar.gz
 	 openssl3.patch
 	 "
@@ -15,7 +15,7 @@ options="!check" # fail on 'home'
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/asuran-cli/APKBUILD b/testing/asuran-cli/APKBUILD
index adc25239936ba4223d3544beac25097897af2b75..8cd09c6bb5d99df4429e468b5114e2b3871b3242 100644
--- a/testing/asuran-cli/APKBUILD
+++ b/testing/asuran-cli/APKBUILD
@@ -2,13 +2,14 @@
 # Maintainer: Duncan Bellamy <dunk@denkimushi.com>
 pkgname=asuran-cli
 pkgver=0.1.6
-pkgrel=4
+pkgrel=5
 pkgdesc="Asuran is a new archive format and rust implementation"
 url="https://gitlab.com/asuran-rs/asuran"
 arch="all !s390x !riscv64"
 license="BSD-2-Clause-Patent"
 makedepends="
 	cargo
+	cargo-auditable
 	libssh2-dev
 	openssl-dev
 	xz-dev
@@ -36,7 +37,7 @@ build() {
 		;;
 	esac
 
-	cargo build --release --frozen $features --package asuran-cli
+	cargo auditable build --release --frozen $features --package asuran-cli
 }
 
 check() {
diff --git a/testing/bartib/APKBUILD b/testing/bartib/APKBUILD
index c471603fcb8881a7e4ccd35eecb8d40d979b3eff..5cf49bd43471e62c4626c1ca10e6cbf013c99a87 100644
--- a/testing/bartib/APKBUILD
+++ b/testing/bartib/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=bartib
 pkgver=1.0.1
-pkgrel=0
+pkgrel=1
 pkgdesc="simple timetracker for the command line"
 url="https://github.com/nikolassv/bartib"
 arch="all !s390x !riscv64" # limeted by rust/cargo
 license="GPL-3.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/nikolassv/bartib/archive/refs/tags/v$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/beancount-language-server/APKBUILD b/testing/beancount-language-server/APKBUILD
index d4e72b87de742471861db8c84259ab6744f6c8e9..8f7cb70b6305e9bf0701eddd79531d4abb182a19 100644
--- a/testing/beancount-language-server/APKBUILD
+++ b/testing/beancount-language-server/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=beancount-language-server
 pkgver=1.3.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Language server for Beancount files"
 url="https://github.com/polarmutex/beancount-language-server"
 license="MIT"
 arch="all !armhf" # FTBFS
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/polarmutex/beancount-language-server/archive/v$pkgver/beancount-language-server-$pkgver.tar.gz"
 options="!check" # no test suite
 
@@ -25,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 package() {
diff --git a/testing/boa-cli/APKBUILD b/testing/boa-cli/APKBUILD
index 0068ec585c95bb3a3dab26e79dc88c93d8a47e77..957e6ed02156bec8a4bb5a5ead09624ae7f12afe 100644
--- a/testing/boa-cli/APKBUILD
+++ b/testing/boa-cli/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=boa-cli
 pkgver=0.16
-pkgrel=0
+pkgrel=1
 pkgdesc="An embeddable and experimental Javascript engine written in Rust"
 url="https://github.com/boa-dev/boa/"
 # 32-bit: failing tests
 # s390x/riscv64: nix crate
 arch="all !armhf !armv7 !x86 !riscv64 !s390x"
 license="MIT OR Unlicense"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/boa-dev/boa/archive/refs/tags/v$pkgver/boa-$pkgver.tar.gz"
 builddir="$srcdir/boa-$pkgver"
 
@@ -21,7 +21,7 @@ prepare() {
 }
 
 build() {
-	cargo build --package boa_cli --release --frozen
+	cargo auditable build --package boa_cli --release --frozen
 }
 
 check() {
diff --git a/testing/bore/APKBUILD b/testing/bore/APKBUILD
index ebba941363d9ac886dbab4a520c1096defbc3354..4b1808d393734aa9f90f2a5c3030fb2e3e2a94bc 100644
--- a/testing/bore/APKBUILD
+++ b/testing/bore/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Thomas Kienlen <kommander@laposte.net>
 pkgname=bore
 pkgver=0.5.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple CLI tool for making tunnels to localhost"
 url="https://github.com/ekzhang/bore"
 # riscv64: rust broken
 # s390x: tests fail
 arch="all !riscv64 !s390x"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/ekzhang/bore/archive/v$pkgver/bore-$pkgver.tar.gz"
 
 
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/cargo-deny/APKBUILD b/testing/cargo-deny/APKBUILD
index f78d61e2877d9cce178a44116d4eea65408bd193..6be7154b62ef6d38c6aa2cb5288f4864cc48c429 100644
--- a/testing/cargo-deny/APKBUILD
+++ b/testing/cargo-deny/APKBUILD
@@ -1,13 +1,14 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=cargo-deny
 pkgver=0.13.9
-pkgrel=0
+pkgrel=1
 pkgdesc="Cargo plugin for linting dependencies"
 url="https://github.com/EmbarkStudios/cargo-deny"
 arch="all"
 license="Apache-2.0 OR MIT"
 makedepends="
 	cargo
+	cargo-auditable
 	libgit2-dev
 	libssh2-dev
 	openssl-dev
@@ -43,7 +44,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen --no-default-features
+	cargo auditable build --release --frozen --no-default-features
 }
 
 check() {
diff --git a/testing/cargo-generate/APKBUILD b/testing/cargo-generate/APKBUILD
index b0bd0ed9d09f838b97a0bcc3e3ec952fee8da9f9..391fe6f35ed380a8f17827770402119bda5e3b4d 100644
--- a/testing/cargo-generate/APKBUILD
+++ b/testing/cargo-generate/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=cargo-generate
 pkgver=0.18.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Use pre-existing git repositories as templates"
 url="https://github.com/cargo-generate/cargo-generate"
 license="MIT OR Apache-2.0"
 arch="all !s390x" # fails to build nix crate
-makedepends="cargo libgit2-dev openssl-dev"
+makedepends="cargo libgit2-dev openssl-dev cargo-auditable"
 source="https://github.com/cargo-generate/cargo-generate/archive/v$pkgver/cargo-generate-$pkgver.tar.gz
 	remove-cargo-husky.patch
 	"
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --no-default-features
+	cargo auditable build --frozen --release --no-default-features
 }
 
 check() {
diff --git a/testing/cargo-vendor-filterer/APKBUILD b/testing/cargo-vendor-filterer/APKBUILD
index 9ce38eb8b728f3d7fba539207b4f6bd087ef9d6f..01482722c085eb4124f6486b298b4b68db7a17cb 100644
--- a/testing/cargo-vendor-filterer/APKBUILD
+++ b/testing/cargo-vendor-filterer/APKBUILD
@@ -1,13 +1,14 @@
 # Maintainer: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
 pkgname=cargo-vendor-filterer
 pkgver=0.5.9
-pkgrel=0
+pkgrel=1
 pkgdesc="cargo vendor with filtering for platforms and more"
 url="https://github.com/coreos/cargo-vendor-filterer"
 arch="all"
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	openssl-dev
 	"
 source="$pkgname-$pkgver.tar.gz::https://github.com/coreos/cargo-vendor-filterer/archive/refs/tags/v$pkgver.tar.gz"
@@ -26,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/castor/APKBUILD b/testing/castor/APKBUILD
index 34754db0b2cf0542d40de8001f426c49f54d5fde..6d497a1db3ed73e9b75b7dd79f4aa137436e4cf3 100644
--- a/testing/castor/APKBUILD
+++ b/testing/castor/APKBUILD
@@ -1,17 +1,17 @@
 # Maintainer: Joel Hansen <joelh@disroot.org>
 pkgname=castor
 pkgver=0.9.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Graphical browser for Gemini, Gopher and Finger"
 url="https://sr.ht/~julienxx/Castor/"
 license="MIT"
 arch="all !s390x !riscv64" # limited by rust/cargo
-makedepends="rust cargo gtk+3.0-dev openssl-dev>3"
+makedepends="rust cargo gtk+3.0-dev openssl-dev>3 cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://git.sr.ht/~julienxx/castor/archive/$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked --verbose
+	cargo auditable build --release --locked --verbose
 }
 
 check() {
diff --git a/testing/checksec-rs/APKBUILD b/testing/checksec-rs/APKBUILD
index 8e76ad65b82564510ed4b5ead7187795fd7244ca..853c5ae0db12e2aa652d895a14e6f6e7cde6f5f6 100644
--- a/testing/checksec-rs/APKBUILD
+++ b/testing/checksec-rs/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=checksec-rs
 pkgver=0.0.9
-pkgrel=0
+pkgrel=1
 pkgdesc="Fast multi-platform (ELF/PE/MachO) binary checksec"
 url="https://github.com/etke/checksec.rs"
 arch="all"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/etke/checksec.rs/archive/refs/tags/v$pkgver.tar.gz"
 builddir="$srcdir/checksec.rs-$pkgver"
 options="net"
@@ -22,7 +22,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen --no-default-features --features="elf,color"
+	cargo auditable build --release --frozen --no-default-features --features="elf,color"
 }
 
 check() {
diff --git a/testing/chim/APKBUILD b/testing/chim/APKBUILD
index c9274846665abedc6616180a121a9b6e9cf6401c..65e6531faf97515938a17c8f9dd9ff7755f1321f 100644
--- a/testing/chim/APKBUILD
+++ b/testing/chim/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jeff Dickey <release@chim.sh>
 pkgname=chim
 pkgver=1.1.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Cross-platform binary shims with optional remote fetching."
 url="https://chim.sh"
 arch="all !s390x !riscv64 !ppc64le" # limited by cargo
@@ -10,6 +10,7 @@ license="MIT"
 makedepends="
 	bzip2-dev
 	cargo
+	cargo-auditable
 	xz-dev
 	"
 subpackages="$pkgname-doc"
@@ -24,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/cicada/APKBUILD b/testing/cicada/APKBUILD
index 1ee306e531d172cfbc19e3c3de496e93e38d73b3..2fbe0dc58ab92db740c314667d731c561fcf084c 100644
--- a/testing/cicada/APKBUILD
+++ b/testing/cicada/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Hugo Wang <w@mitnk.com>
 pkgname=cicada
 pkgver=0.9.36
-pkgrel=0
+pkgrel=1
 pkgdesc="A bash-like Unix shell"
 url="https://github.com/mitnk/cicada"
 # s390x and riscv64 blocked by cargo
 arch="all !s390x !riscv64"
 license="MIT"
 depends="ncurses-terminfo-base"
-makedepends="sqlite-dev cargo"
+makedepends="sqlite-dev cargo cargo-auditable"
 checkdepends="xz"
 install="$pkgname.post-install $pkgname.pre-deinstall"
 subpackages="$pkgname-doc"
@@ -25,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/cloud-hypervisor/APKBUILD b/testing/cloud-hypervisor/APKBUILD
index 9d2d7f685145268a2285ffcb316ed71592dc4efb..e7d689947df87b87712b97b63df4b02d159baabd 100644
--- a/testing/cloud-hypervisor/APKBUILD
+++ b/testing/cloud-hypervisor/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=cloud-hypervisor
 pkgver=32.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Virtual machine monitor for modern cloud workloads"
 url="https://www.cloudhypervisor.org/"
 # Only x86_64 and aarch64 are officially supported
 arch="x86_64 aarch64"
 license="Apache-2.0 AND BSD-3-Clause"
-makedepends="cargo libcap-utils"
+makedepends="cargo libcap-utils cargo-auditable"
 source="https://github.com/cloud-hypervisor/cloud-hypervisor/releases/download/v$pkgver/cloud-hypervisor-v$pkgver.tar.xz"
 builddir="$srcdir/$pkgname-v$pkgver"
 options="!check" # tests need CAP_NET_ADMIN
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/conduit/APKBUILD b/testing/conduit/APKBUILD
index 713cc45121df5088b736bea1e8a007b596e2a967..c7bf96e24a0d63c700611f3357d2d459b4002469 100644
--- a/testing/conduit/APKBUILD
+++ b/testing/conduit/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Patrycja Rosa <alpine@ptrcnull.me>
 pkgname=conduit
 pkgver=0.5.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple, fast and reliable chat server powered by Matrix"
 url="https://conduit.rs/"
 # ring-rs
 arch="all !riscv64 !ppc64le !s390x"
 license="Apache-2.0"
-makedepends="cargo sqlite-dev"
+makedepends="cargo sqlite-dev cargo-auditable"
 install="$pkgname.pre-install"
 subpackages="$pkgname-openrc"
 source="https://gitlab.com/famedly/conduit/-/archive/v$pkgver/conduit-v$pkgver.tar.gz
@@ -30,7 +30,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen $_features
+	cargo auditable build --release --frozen $_features
 }
 
 check() {
diff --git a/testing/desed/APKBUILD b/testing/desed/APKBUILD
index 0eba073e9bed0481c80d3f9df2115bee3e77e310..bbca5fd5f0587a70db56e061b895230cd6dd6476 100644
--- a/testing/desed/APKBUILD
+++ b/testing/desed/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=desed
 pkgver=1.2.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Demystify and debug your sed scripts, from comfort of your terminal"
 url="https://github.com/SoptikHa2/desed"
 # riscv64: rust broken
 arch="all !riscv64"
 license="GPL-3.0-or-later"
 depends="sed"  # needs GNU sed
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="$pkgname-doc"
 source="https://github.com/SoptikHa2/desed/archive/v$pkgver/desed-$pkgver.tar.gz
 	Cargo.lock
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/diskonaut/APKBUILD b/testing/diskonaut/APKBUILD
index dc3790f2b68eb5341ad7df85e7e78e49c1a9e7eb..772e8cc760a5dc97c20c8e88e7b64fcf98ac87a5 100644
--- a/testing/diskonaut/APKBUILD
+++ b/testing/diskonaut/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Willow Barraco <contact@willowbarraco.fr>
 pkgname=diskonaut
 pkgver=0.11.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Terminal disk space navigator"
 url="https://github.com/imsnif/diskonaut"
 license="MIT"
 arch="all !armhf !s390x !riscv64" # doesn't build
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/imsnif/diskonaut/archive/refs/tags/$pkgver.tar.gz"
 options="net"
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/diskus/APKBUILD b/testing/diskus/APKBUILD
index 73732bc7a2be34e992f99abd9bf2ae584e69541e..6cc7f5689a8a078e0ed2f99a01a8cfb327e9522d 100644
--- a/testing/diskus/APKBUILD
+++ b/testing/diskus/APKBUILD
@@ -2,18 +2,18 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=diskus
 pkgver=0.7.0
-pkgrel=0
+pkgrel=1
 pkgdesc="fast alternative for du"
 url="https://github.com/sharkdp/diskus"
 arch="all !s390x !riscv64" # limited by cargo
 options="!check" #size_of_single_file test timout on armhf
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgdir.tar.gz::https://github.com/sharkdp/diskus/archive/refs/tags/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 package() {
diff --git a/testing/dotenv-linter/APKBUILD b/testing/dotenv-linter/APKBUILD
index 742e263e7dbf508979023e49e79d2d7b43b20bf5..2ed06e9443eef94c54ca242642009684805fadf4 100644
--- a/testing/dotenv-linter/APKBUILD
+++ b/testing/dotenv-linter/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Patrycja Rosa <alpine@ptrcnull.me>
 pkgname=dotenv-linter
 pkgver=3.3.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Lightning-fast linter for .env files"
 url="https://dotenv-linter.github.io"
 arch="all !s390x !ppc64le !riscv64" # rust/rustls
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/dotenv-linter/dotenv-linter/archive/refs/tags/v$pkgver/dotenv-linter-$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/dum/APKBUILD b/testing/dum/APKBUILD
index 44b7e74add0aaae5fe5ce31ad9dd9d971c63c55d..c87c6476d6087fa4583330e2deb7f8965dacf792 100644
--- a/testing/dum/APKBUILD
+++ b/testing/dum/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=dum
 pkgver=0.1.19
-pkgrel=0
+pkgrel=1
 pkgdesc="An npm scripts runner written in Rust"
 url="https://github.com/egoist/dum"
 arch="aarch64 armhf armv7 ppc64le x86 x86_64"  # blocked by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/egoist/dum/archive/v$pkgver/dum-$pkgver.tar.gz
 	strip-env_logger-features.patch
 	"
@@ -31,7 +31,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/electron-tasje/APKBUILD b/testing/electron-tasje/APKBUILD
index 8d97af9676ae08e36ff51712b7043ffc5f70a3c3..48f52ba8889e881e8c65e200289fae10e4b7d969 100644
--- a/testing/electron-tasje/APKBUILD
+++ b/testing/electron-tasje/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=electron-tasje
 pkgver=0.5.7
-pkgrel=0
+pkgrel=1
 pkgdesc="Tiny replacement for electron-builder"
 url="https://codeberg.org/selfisekai/electron_tasje/"
 arch="aarch64 x86_64"	# only useful on platforms with electron
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="electron_tasje-$pkgver.tar.gz::https://codeberg.org/selfisekai/electron_tasje/archive/v$pkgver.tar.gz"
 builddir="$srcdir/electron_tasje"
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/elfx86exts/APKBUILD b/testing/elfx86exts/APKBUILD
index 65e20c0e3b6b241e4c48477aabc2be0348ee0a14..f6273c16d95ee9a0b20e532f3fbc640994e29be3 100644
--- a/testing/elfx86exts/APKBUILD
+++ b/testing/elfx86exts/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=elfx86exts
 pkgver=0.5.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Decode x86 binaries and detect cpu feature requirements"
 url="https://github.com/pkgw/elfx86exts"
 # riscv64: rust
 arch="all !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/pkgw/elfx86exts/archive/refs/tags/elfx86exts@$pkgver.tar.gz"
 builddir="$srcdir/$pkgname-$pkgname-$pkgver"
 options="net"
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/eva/APKBUILD b/testing/eva/APKBUILD
index 3eaeb1809ce328abdcac5bcebe84b7c1b6e407a6..e4fdbacac55ff37187d096fa6ff04d018f0e0543 100644
--- a/testing/eva/APKBUILD
+++ b/testing/eva/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=eva
 pkgver=0.3.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Calculator REPL, similar to bc(1)"
 url="https://github.com/nerdypepper/eva"
 license="MIT"
 arch="all !s390x !riscv64" # limited by rust/cargo
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/nerdypepper/eva/archive/v$pkgver/eva-$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/eww/APKBUILD b/testing/eww/APKBUILD
index aca3ff785e9fe2f958c70b9ec85f8173869e68c0..c44caa06032237aa69610b0725f6f2e7012046b4 100644
--- a/testing/eww/APKBUILD
+++ b/testing/eww/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=eww
 pkgver=0.4.0
-pkgrel=0
+pkgrel=1
 pkgdesc="ElKowars wacky widgets"
 url="https://elkowar.github.io/eww/"
 arch="aarch64 x86_64"  # blocked by rustup
@@ -11,9 +11,10 @@ license="MIT"
 #  Don't move this aport out of the testing repo until it can be built with
 #  our rust!
 makedepends="
-	rustup
+	cargo-auditable
 	gtk+3.0-dev
 	gtk-layer-shell-dev
+	rustup
 	"
 subpackages="$pkgname-dbg"
 source="https://github.com/elkowar/eww/archive/refs/tags/v$pkgver/eww-$pkgver.tar.gz
@@ -41,7 +42,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --no-default-features --features=wayland
+	cargo auditable build --frozen --release --no-default-features --features=wayland
 }
 
 check() {
diff --git a/testing/felix/APKBUILD b/testing/felix/APKBUILD
index b7a863d4ba3f8ba8e10ae5335b79f2064588194c..47938e9161f26a7f41b51a2baeb5aed6f27c9ba7 100644
--- a/testing/felix/APKBUILD
+++ b/testing/felix/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=felix
 pkgver=2.2.8
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple TUI file manager with vim-like key mapping"
 url="https://kyoheiu.dev/felix/"
 # s390x: nix crate doesn't build yet
 arch="all !s390x"
 license="MIT"
-makedepends="cargo bzip2-dev zlib-ng-dev zstd-dev"
+makedepends="cargo bzip2-dev zlib-ng-dev zstd-dev cargo-auditable"
 checkdepends="zoxide"
 source="
 	$pkgname-$pkgver.tar.gz::https://github.com/kyoheiu/felix/archive/refs/tags/v$pkgver.tar.gz
@@ -33,7 +33,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/ffsend/APKBUILD b/testing/ffsend/APKBUILD
index e34c1d4cb1c07c7f2f88bc9ca991adcf06b92f50..615c3a0363c77865aa8b7937e8f2ea0d9ba663d8 100644
--- a/testing/ffsend/APKBUILD
+++ b/testing/ffsend/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=ffsend
 pkgver=0.2.76
-pkgrel=2
+pkgrel=3
 pkgdesc="A fully featured Firefox Send client"
 url="https://gitlab.com/timvisee/ffsend"
 # riscv64: blocked by cargo
@@ -10,6 +10,7 @@ arch="all !riscv64"
 license="GPL-3.0-only"
 makedepends="
 	cargo
+	cargo-auditable
 	openssl-dev
 	"
 subpackages="
@@ -33,7 +34,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/filite/APKBUILD b/testing/filite/APKBUILD
index 06ff397bb3c399ec4e0262be99ac9649192c1bdc..6f1a924b3c74ebadea55761720cf3406e73804c9 100644
--- a/testing/filite/APKBUILD
+++ b/testing/filite/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=filite
 pkgver=0.3.0
-pkgrel=1
+pkgrel=2
 pkgdesc="simple and light pastebin"
 url="https://github.com/raftario/filite"
 arch="x86_64 armv7 armhf aarch64 x86" # limited by rust/cargo
 license="MIT"
-makedepends="cargo sqlite-dev"
+makedepends="cargo sqlite-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/raftario/filite/archive/refs/tags/v$pkgver.tar.gz
 	fix-build.patch
 	system-sqlite.patch
@@ -21,7 +21,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/firecracker/APKBUILD b/testing/firecracker/APKBUILD
index d4714dd21e1e20fe0f05545de463ae40771997f9..d345282c91c3f41976e69cb110a18cf7348d3293 100644
--- a/testing/firecracker/APKBUILD
+++ b/testing/firecracker/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Dennis Przytarski <dennis@przytarski.com>
 pkgname=firecracker
 pkgver=1.3.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Secure and fast microVMs for serverless computing"
 url="https://github.com/firecracker-microvm/firecracker"
 arch="aarch64 x86_64"
 license="Apache-2.0"
-makedepends="rust cargo clang-dev linux-headers"
+makedepends="rust cargo clang-dev linux-headers cargo-auditable"
 subpackages="
 	$pkgname-seccompiler
 	$pkgname-rebase-snap:rebase_snap
@@ -29,7 +29,7 @@ prepare() {
 
 build() {
 	export CARGO_PROFILE_RELEASE_OPT_LEVEL=2
-	cargo build \
+	cargo auditable build \
 		--package firecracker \
 		--package jailer \
 		--package seccompiler \
diff --git a/testing/geckodriver/APKBUILD b/testing/geckodriver/APKBUILD
index a4dae8f83d7041df3b9667203729dc000ac2dfb5..28735c7d82dd63d10a6bdc8205c80a5bd5cc4219 100644
--- a/testing/geckodriver/APKBUILD
+++ b/testing/geckodriver/APKBUILD
@@ -2,18 +2,18 @@
 # Maintainer: Nulo <git@nulo.in>
 pkgname=geckodriver
 pkgver=0.33.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Proxy for using W3C WebDriver compatible clients to interact with Gecko-based browsers."
 url="https://github.com/mozilla/geckodriver"
 # s390x: limited by cargo
 arch="all !s390x !riscv64"
 license="MPL"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/mozilla/geckodriver/archive/refs/tags/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --bin geckodriver
+	cargo auditable build --release --bin geckodriver
 }
 
 check() {
diff --git a/testing/gitoxide/APKBUILD b/testing/gitoxide/APKBUILD
index 633eea8b6a8052b22bf912289881c05af4429032..5024d5c3c979d58b680d5773a5c9b14f2302f7cc 100644
--- a/testing/gitoxide/APKBUILD
+++ b/testing/gitoxide/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=gitoxide
 pkgver=0.14.0
-pkgrel=0
+pkgrel=1
 pkgdesc="An idiomatic, lean, fast & safe pure Rust implementation of Git"
 url="https://github.com/Byron/gitoxide"
 # armhf, armv7, ppc64le, s390x: fails to build crate sha1-asm
@@ -11,6 +11,7 @@ arch="all !armhf !armv7 !ppc64le !riscv64 !s390x"
 license="Apache-2.0 OR MIT"
 makedepends="
 	cargo
+	cargo-auditable
 	curl-dev
 	zlib-dev
 	zlib-ng-dev
@@ -50,7 +51,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/gleam/APKBUILD b/testing/gleam/APKBUILD
index a035563233028c94d445e1e1eca3cc0c194dc08d..06457e02e40d5c6cff697a1b5971edefdbee913f 100644
--- a/testing/gleam/APKBUILD
+++ b/testing/gleam/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: rubicon <rubicon@mailo.com>
 pkgname=gleam
 pkgver=0.28.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Statically-typed language that compiles to Erlang and JS"
 url="https://gleam.run/"
 # s390x, riscv64, ppc64le: ring
@@ -10,7 +10,7 @@ url="https://gleam.run/"
 arch="all !armhf !armv7 !s390x !riscv64 !ppc64le"
 license="Apache-2.0"
 depends="erlang-dev"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver-2.tar.gz::https://github.com/gleam-lang/gleam/archive/refs/tags/v$pkgver.tar.gz"
 
 
@@ -21,7 +21,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/gobang/APKBUILD b/testing/gobang/APKBUILD
index a10cdf02541ae5e552b3fb27f3e2d510312750a6..8a4126fbe21d4a830a4b00c30e56adbce9fbb1e4 100644
--- a/testing/gobang/APKBUILD
+++ b/testing/gobang/APKBUILD
@@ -3,14 +3,15 @@
 pkgname=gobang
 pkgver=0.1.0_alpha5
 _pkgver=0.1.0-alpha.5
-pkgrel=0
+pkgrel=1
 pkgdesc="Cross-platform TUI database management tool written in Rust"
 url="https://github.com/TaKO8Ki/gobang"
 arch="x86_64 armv7 armhf aarch64 x86"  # limited by rust/cargo/ring crate
 license="GPL-2.0-or-later"
 makedepends="
-	rust
 	cargo
+	cargo-auditable
+	rust
 	"
 source="https://github.com/TaKO8Ki/gobang/archive/refs/tags/v$_pkgver/gobang-v$_pkgver.tar.gz"
 options="!check" # no test suite
@@ -23,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/grass/APKBUILD b/testing/grass/APKBUILD
index 7d78f4930046536e03fff7bc57230aaf563b8f49..c3a94f65199e52baeb6ec46a2f43214b5e8199d7 100644
--- a/testing/grass/APKBUILD
+++ b/testing/grass/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=grass
 pkgver=0.12.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Sass compiler written purely in Rust"
 url="https://github.com/connorskees/grass"
 arch="all"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="
 	https://github.com/connorskees/grass/archive/v$pkgver/grass-v$pkgver.tar.gz
 	"
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build -p grass --release --frozen
+	cargo auditable build -p grass --release --frozen
 }
 
 check() {
diff --git a/testing/grcov/APKBUILD b/testing/grcov/APKBUILD
index 6083b00fd7b9636f43fd8fa633a22a6899c2e252..178cd1866838d954b684b9c82d0c9d3517bc99ca 100644
--- a/testing/grcov/APKBUILD
+++ b/testing/grcov/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Rasmus Thomsen <oss@cogitri.dev>
 pkgname=grcov
 pkgver=0.8.18
-pkgrel=0
+pkgrel=1
 pkgdesc="Rust tool to collect and aggregate code coverage data"
 url="https://github.com/mozilla/grcov"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # Limited by cargo
 license="MPL-2.0"
 depends="gcc" # gcov
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 options="net !check" # Failing due to utf-8 (locale?)
 source="$pkgname-$pkgver.tar.gz::https://github.com/mozilla/grcov/archive/v$pkgver.tar.gz"
 
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/greetd-regreet/APKBUILD b/testing/greetd-regreet/APKBUILD
index e6e123562ed2061f42ad60543716c67d26f06b3d..3212f6e6857551c25385ee1c0bd14ae82c78a30d 100644
--- a/testing/greetd-regreet/APKBUILD
+++ b/testing/greetd-regreet/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Guy Godfroy <guy.godfroy@gugod.fr>
 pkgname=greetd-regreet
 pkgver=0.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Clean and customizable GTK4 based greeter for greetd"
 url="https://github.com/rharish101/ReGreet"
 # s390x, riscv64: greetd
@@ -10,7 +10,7 @@ url="https://github.com/rharish101/ReGreet"
 arch="all !armhf !s390x !riscv64"
 license="GPL-3.0-or-later"
 depends="greetd"
-makedepends="cargo gtk4.0-dev"
+makedepends="cargo gtk4.0-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/rharish101/ReGreet/archive/refs/tags/$pkgver.tar.gz"
 builddir="$srcdir/ReGreet-$pkgver"
 
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/greetd-wlgreet/APKBUILD b/testing/greetd-wlgreet/APKBUILD
index 0c9ee2d6e3c18cee8ee2076c87c6f2dbcdb16097..e1b76457af0409f5feafa96cf8e20c5fd74bae98 100644
--- a/testing/greetd-wlgreet/APKBUILD
+++ b/testing/greetd-wlgreet/APKBUILD
@@ -3,7 +3,7 @@
 pkgname=greetd-wlgreet
 _projname=wlgreet
 pkgver=0.4
-pkgrel=0
+pkgrel=1
 pkgdesc="Raw wayland greeter for greetd"
 url="https://git.sr.ht/~kennylevinsen/wlgreet"
 # riscv64, s390x: blocked by greetd
@@ -15,6 +15,7 @@ depends="
 	"
 makedepends="
 	cargo
+	cargo-auditable
 	wayland-dev
 	"
 source="$pkgname-$pkgver.tar.gz::https://git.sr.ht/~kennylevinsen/wlgreet/archive/$pkgver.tar.gz
@@ -32,7 +33,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 package() {
diff --git a/testing/grpc-health-check/APKBUILD b/testing/grpc-health-check/APKBUILD
index 9c2792fbe75a723f505b9c37e05cf30d7e097e03..1393a5e1b1d427ae73a3618d570468be2dd70c82 100644
--- a/testing/grpc-health-check/APKBUILD
+++ b/testing/grpc-health-check/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Build Robot <buildrobot@pay.pizza>
 pkgname=grpc-health-check
 pkgver=0.1.1
-pkgrel=2
+pkgrel=3
 arch="all !s390x !ppc64le !armhf !armv7 !riscv64"
 pkgdesc="gRPC health checking protocol"
 url="https://github.com/paypizza/grpc-health-check"
 license="Apache-2.0"
-makedepends="cargo protoc rustfmt"
+makedepends="cargo protoc rustfmt cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/paypizza/grpc-health-check/archive/$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 
 build() {
 	export PROTOC=/usr/bin/protoc
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/habitctl/APKBUILD b/testing/habitctl/APKBUILD
index 6e9a3db19493ed8335c5f0e166c2bdc0a5ab6448..542d217f6461f38853798c1e9b247ca58eb03a6a 100644
--- a/testing/habitctl/APKBUILD
+++ b/testing/habitctl/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Willow Barraco <contact@willowbarraco.fr>
 pkgname=habitctl
 pkgver=0.1.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Minimalist command line tool to track and examine habits"
 url="https://github.com/blinry/habitctl"
 arch="aarch64 armhf armv7 ppc64le x86 x86_64"  # limited by rust/cargo
 license="GPL-2.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/blinry/$pkgname/archive/refs/tags/$pkgver.tar.gz"
 options="!check"  # no tests provided
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/halp/APKBUILD b/testing/halp/APKBUILD
index 01a05509218f7bddfdf0c3d74e8bb318a5148c9b..53de304917a10b11b68a3a63ed4933e82fc5b1c9 100644
--- a/testing/halp/APKBUILD
+++ b/testing/halp/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Orhun Parmaksız <orhunparmaksiz@gmail.com>
 pkgname=halp
 pkgver=0.1.6
-pkgrel=1
+pkgrel=2
 pkgdesc="A CLI tool to get help with CLI tools"
 url="https://github.com/orhun/halp"
 # s390x, ppc64le, riscv64: blocked by ring crate
 arch="all !s390x !ppc64le !riscv64"
 license="MIT OR Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 checkdepends="util-linux"
 subpackages="
 	$pkgname-doc
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 	mkdir -p man
 	OUT_DIR=man/ "./target/release/$pkgname-mangen"
 	mkdir -p completions
diff --git a/testing/hex/APKBUILD b/testing/hex/APKBUILD
index 92ad8c81cd406fbef0d64b84377fbbce4496f52d..514dab628848db1e76baf4dcdeb8a870f9403b71 100644
--- a/testing/hex/APKBUILD
+++ b/testing/hex/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=hex
 pkgver=0.4.2
-pkgrel=1
+pkgrel=2
 pkgdesc="futuristic take on hexdump"
 url="https://github.com/sitkevij/hex"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/sitkevij/hex/archive/refs/tags/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/horust/APKBUILD b/testing/horust/APKBUILD
index d24d1503383c96ea9f78a62e750bb796f2e5f72e..f84b0f79e922e9d2a772f3969fa380b146eb201c 100644
--- a/testing/horust/APKBUILD
+++ b/testing/horust/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: William Desportes <williamdes@wdes.fr>
 pkgname=horust
 pkgver=0.1.7
-pkgrel=0
+pkgrel=1
 pkgdesc="Horust is a supervisor / init system written in rust and designed to be run inside containers"
 url="https://github.com/FedericoPonzi/Horust"
 # s390x, riscv64: nix/libc crates lack support
 arch="all !s390x !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 checkdepends="bash" # test_single_command uses bash
 subpackages="$pkgname-doc"
 options="net"
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/hstdb/APKBUILD b/testing/hstdb/APKBUILD
index 907b16fc4eddec6c5d588026bceb2dfa6e9df452..3c6dfee2c3eedb67f5c387a9b4344a4da0e067a2 100644
--- a/testing/hstdb/APKBUILD
+++ b/testing/hstdb/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=hstdb
 pkgver=2.1.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Better history management for Zsh"
 url="https://github.com/AlexanderThaller/hstdb"
 # riscv64: textrels
 # s390x: fails to build nix crate
 arch="all !riscv64 !s390x"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/AlexanderThaller/hstdb/archive/$pkgver/hstdb-$pkgver.tar.gz
 	fix-format_duration-panicing.patch
 	replace-pretty_env_logger.patch
@@ -31,7 +31,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/htmlq/APKBUILD b/testing/htmlq/APKBUILD
index 72b784baefca4d46ed2f5ad9f6f5f14f7beb56c2..815daf9250b69b461c6bdc2b1d68f25cbe7fdb3c 100644
--- a/testing/htmlq/APKBUILD
+++ b/testing/htmlq/APKBUILD
@@ -2,18 +2,18 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=htmlq
 pkgver=0.4.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Like jq, but for HTML"
 url="https://github.com/mgdm/htmlq"
 license="MIT"
 arch="all !s390x !riscv64" # blocked by rust/cargo
 options="!check" # no test suite
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/mgdm/htmlq/archive/v$pkgver/htmlq-$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 package() {
diff --git a/testing/hurl/APKBUILD b/testing/hurl/APKBUILD
index c72da602225aab5622cc8ba955f420dd23f5dcdc..3250314ced7a420f9c5e4535991c7ccb81be71b7 100644
--- a/testing/hurl/APKBUILD
+++ b/testing/hurl/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=hurl
 pkgver=3.0.0
-pkgrel=0
+pkgrel=1
 pkgdesc="CLI to run HTTP requests defined in simple plain text format"
 url="https://hurl.dev/"
 arch="all"
 license="Apache-2.0"
-makedepends="cargo python3 curl-dev libxml2-dev"
+makedepends="cargo python3 curl-dev libxml2-dev cargo-auditable"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/Orange-OpenSource/hurl/archive/refs/tags/$pkgver.tar.gz"
 options="!check" # tests require a running local web server
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 
 	for binary in hurl hurlfmt; do
 		python3 bin/release/gen_manpage.py docs/manual/$binary.md > $binary.1
diff --git a/testing/hwatch/APKBUILD b/testing/hwatch/APKBUILD
index 8ba0a9bba6884f5e74432b2ea18543a89f952f5d..cdfc2a93496220b4bea2e9355a405d9781fa35ba 100644
--- a/testing/hwatch/APKBUILD
+++ b/testing/hwatch/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=hwatch
 pkgver=0.3.9
-pkgrel=0
+pkgrel=1
 pkgdesc="A modern alternative to the watch command"
 url="https://github.com/blacknon/hwatch"
 arch="aarch64 armhf armv7 ppc64le x86 x86_64"  # blocked by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-fish-completion
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 package() {
diff --git a/testing/hyperlink/APKBUILD b/testing/hyperlink/APKBUILD
index 847641beb482a5b95bc930791cf4b2f05eb2884e..0b6f2be2646e2408d79bcf8c035f44c4e6c02e42 100644
--- a/testing/hyperlink/APKBUILD
+++ b/testing/hyperlink/APKBUILD
@@ -1,14 +1,14 @@
 # Maintainer: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
 pkgname=hyperlink
 pkgver=0.1.27
-pkgrel=0
+pkgrel=1
 pkgdesc="Very fast link checker for CI"
 url="https://github.com/untitaker/hyperlink"
 # riscv64: fails to build libc crate
 # armhf: builds freeze and time out
 arch="all !riscv64 !armhf"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/untitaker/hyperlink/archive/refs/tags/$pkgver.tar.gz"
 
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/i3status-rust/APKBUILD b/testing/i3status-rust/APKBUILD
index 39a7f78d52914e2c1f64f5d9e2ce6938810f0dfa..376395560a733358d1ea6f6f5c076635d00bc62d 100644
--- a/testing/i3status-rust/APKBUILD
+++ b/testing/i3status-rust/APKBUILD
@@ -3,13 +3,14 @@
 # Maintainer: Galen Abell <galen@galenabell.com>
 pkgname=i3status-rust
 pkgver=0.31.4
-pkgrel=0
+pkgrel=1
 pkgdesc="i3status replacement in Rust"
 url="https://github.com/greshake/i3status-rust"
 arch="all !s390x !riscv64" # limited by cargo
 license="GPL-3.0-only"
 makedepends="
 	cargo
+	cargo-auditable
 	curl-dev
 	dbus-dev
 	lm-sensors-dev
@@ -31,7 +32,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/imageflow/APKBUILD b/testing/imageflow/APKBUILD
index b14ca2e450495a62ed1185ea412d7579f128002a..ada031b1becfa7e51c37f22a09aefa1deb9c0ff4 100644
--- a/testing/imageflow/APKBUILD
+++ b/testing/imageflow/APKBUILD
@@ -4,12 +4,12 @@ pkgname=imageflow
 pkgver=1.7.0
 _rcver=-rc64 # needed until first official release
 _commit=c8951261f8d90ea3a445eaa569538d398e19a25e
-pkgrel=1
+pkgrel=2
 pkgdesc="High-performance image manipulation for web servers"
 url="https://github.com/imazen/imageflow"
 arch="x86_64" # limited by cargo and SIMD dependency
 license="AGPL-3.0-only"
-makedepends="bash cargo zip nasm git openssl-dev>3 wget curl libpng-dev dssim"
+makedepends="bash cargo zip nasm git openssl-dev>3 wget curl libpng-dev dssim cargo-auditable"
 source="$pkgname-$pkgver$_rcver.tar.gz::https://github.com/imazen/imageflow/archive/v$pkgver$_rcver.tar.gz"
 builddir="$srcdir/$pkgname-$pkgver$_rcver"
 subpackages="$pkgname-server:_server
@@ -35,7 +35,7 @@ build() {
 	export GIT_DESCRIBE_AAL="tags/$version_prefix-0-alpine"
 	export GIT_OPTIONAL_BRANCH="n/a"
 
-	cargo build --workspace --release --locked
+	cargo auditable build --workspace --release --locked
 }
 
 check() {
diff --git a/testing/innernet/APKBUILD b/testing/innernet/APKBUILD
index 048fb1afe21337129c103a4f39272f47e4b77767..8c6e3573c70be762ab4e9d4d99675370b4e2f7cd 100644
--- a/testing/innernet/APKBUILD
+++ b/testing/innernet/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Uli Baum <xeji@cat3.de>
 pkgname=innernet
 pkgver=1.5.5
-pkgrel=0
+pkgrel=1
 pkgdesc="A private network system that uses WireGuard under the hood"
 arch="all !armhf !ppc64le" # tests fail on armhf and ppc64le
 url="https://github.com/tonarino/innernet"
 license="MIT"
-makedepends="cargo clang-dev sqlite-dev"
+makedepends="cargo clang-dev sqlite-dev cargo-auditable"
 source="
 	https://github.com/tonarino/innernet/archive/v$pkgver/$pkgname-$pkgver.tar.gz
 	unbundle-sqlite.patch
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/jaq/APKBUILD b/testing/jaq/APKBUILD
index ca29d57818ba8b45702cb6ba21b5adc7f5f84d44..021994989fb6ba509a8250c5a0ea874d3af8cd08 100644
--- a/testing/jaq/APKBUILD
+++ b/testing/jaq/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=jaq
 pkgver=0.10.0
-pkgrel=0
+pkgrel=1
 pkgdesc="jq clone focused on correctness, speed and simplicity"
 url="https://github.com/01mf02/jaq"
 # riscv64: build failed
 arch="all !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/01mf02/jaq/archive/v$pkgver/$pkgname-$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/jrsonnet-cli/APKBUILD b/testing/jrsonnet-cli/APKBUILD
index b54af9f368e2c0e131caa8680711117675490bbb..0c7585374c946892b2694325ee68a17c2e9b25d1 100644
--- a/testing/jrsonnet-cli/APKBUILD
+++ b/testing/jrsonnet-cli/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=jrsonnet-cli
 pkgver=0.4.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Rust implementation of Jsonnet language"
 url="https://github.com/CertainLach/jrsonnet"
 # riscv64: libc crate
 arch="all !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/CertainLach/jrsonnet/archive/refs/tags/v$pkgver/jrsonnet-v$pkgver.tar.gz"
 builddir="$srcdir/jrsonnet-$pkgver"
 
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --offline --release -p jrsonnet
+	cargo auditable build --frozen --offline --release -p jrsonnet
 }
 
 check() {
diff --git a/testing/jwt-cli/APKBUILD b/testing/jwt-cli/APKBUILD
index 8b8fd89400fef27b91fc57f6bf2f73e0ef6587c3..1f06d4ace1b4f17d1b61e56148c6ea31f9a30359 100644
--- a/testing/jwt-cli/APKBUILD
+++ b/testing/jwt-cli/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=jwt-cli
 pkgver=5.0.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Super fast CLI tool to decode and encode JWTs"
 url="https://github.com/mike-engel/jwt-cli"
 # blocked by ring crate
 arch="all !s390x !ppc64le !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/mike-engel/jwt-cli/archive/refs/tags/$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/kak-lsp/APKBUILD b/testing/kak-lsp/APKBUILD
index 705c9e97ad3cc3ba61536bac0a56017176cc0a85..02ca193539004433929e1260d75c2174536b985b 100644
--- a/testing/kak-lsp/APKBUILD
+++ b/testing/kak-lsp/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Siva Mahadevan <me@svmhdvn.name>
 pkgname=kak-lsp
 pkgver=14.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Language Server Protocol client for Kakoune implemented in Rust"
 url="https://github.com/kak-lsp/kak-lsp"
 arch="all !s390x !riscv64" # limited by cargo
 license="Unlicense OR MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/kak-lsp/kak-lsp/archive/v$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/kbs2/APKBUILD b/testing/kbs2/APKBUILD
index d99c972f56e7acb4ef8e0f3f4eb1b4a1908bb735..e9de466f6c3fc0b59dd072518e246c1d58d8676b 100644
--- a/testing/kbs2/APKBUILD
+++ b/testing/kbs2/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=kbs2
 pkgver=0.7.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Secret manager backed by age"
 url="https://github.com/woodruffw/kbs2"
 arch="all !s390x !riscv64" # blocked by cargo
 license="MIT"
-makedepends="cargo python3"
+makedepends="cargo python3 cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -22,7 +22,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 
 	./target/release/kbs2 --completions bash > kbs2.bash
 	./target/release/kbs2 --completions fish > kbs2.fish
diff --git a/testing/lapce/APKBUILD b/testing/lapce/APKBUILD
index 05e75353467d7a8ba959a2f93aaecec69b5c9b95..353d5865add5620baa46d1851be245f98027d8f1 100644
--- a/testing/lapce/APKBUILD
+++ b/testing/lapce/APKBUILD
@@ -5,7 +5,7 @@
 #
 pkgname=lapce
 pkgver=0.2.5
-pkgrel=0
+pkgrel=1
 pkgdesc="Lightning-fast and Powerful Code Editor written in Rust"
 url="https://lapce.dev"
 # ppc64le: ring crate fails to build
@@ -15,6 +15,7 @@ arch="aarch64 x86_64"  # limited by rust/cargo
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	cmd:patchelf
 	fontconfig-dev
 	freetype-dev
@@ -107,10 +108,10 @@ prepare() {
 
 build() {
 	# Exclude feature lapce-data/updater.
-	cargo build -p lapce-ui --frozen --release --no-default-features \
+	cargo auditable build -p lapce-ui --frozen --release --no-default-features \
 		--features $(echo $_cargo_features | tr ' ' ',')
 
-	cargo build -p lapce-proxy --frozen --release
+	cargo auditable build -p lapce-proxy --frozen --release
 
 	# Add missing vulkan dependency.
 	patchelf --add-needed libvulkan.so.1 target/release/lapce
diff --git a/testing/laze/APKBUILD b/testing/laze/APKBUILD
index b697022a564cb1608c51e2b8f7df721c45a2ebdc..c5133445b6d2ebef495ef96f533b28f34507dca9 100644
--- a/testing/laze/APKBUILD
+++ b/testing/laze/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Kaspar Schleiser <kaspar@schleiser.de>
 pkgname=laze
 pkgver=0.1.15
-pkgrel=0
+pkgrel=1
 pkgdesc="laze is a build system based on Ninja, aiming to be the next goto-alternative to make"
 url="https://laze-build.org"
 arch="all"
 license="Apache-2.0"
 depends="ninja"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 checkdepends="xz"
 subpackages="$pkgname-doc
 	$pkgname-bash-completion
@@ -30,7 +30,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/librespot/APKBUILD b/testing/librespot/APKBUILD
index c4dd64569a2f2f2624db06c7be3a35f72bc6a7f6..75abb7fd29028a9c37011ac8f7068198255aae0c 100644
--- a/testing/librespot/APKBUILD
+++ b/testing/librespot/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer:
 pkgname=librespot
 pkgver=0.4.2
-pkgrel=2
+pkgrel=3
 pkgdesc="Open Source Spotify client library"
 url="https://github.com/librespot-org/librespot"
 arch="all !s390x !riscv64" # limited by cargo
 license="MIT"
 options="!check" # no test suite
-makedepends="cargo alsa-lib-dev"
+makedepends="cargo alsa-lib-dev cargo-auditable"
 install="$pkgname.pre-install"
 subpackages="$pkgname-openrc"
 source="librespot-$pkgver.tar.gz::https://github.com/librespot-org/librespot/archive/v$pkgver.tar.gz
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen \
+	cargo auditable build --release --frozen \
 		--features alsa-backend
 }
 
diff --git a/testing/lighthouse/APKBUILD b/testing/lighthouse/APKBUILD
index 8e6f0e53b05a5c56d4e0121e9d1cf9dd0689e0ac..eff5a2943c29f18ff6d89f46de75a5b413448aa7 100644
--- a/testing/lighthouse/APKBUILD
+++ b/testing/lighthouse/APKBUILD
@@ -2,13 +2,14 @@
 # Maintainer: Oleg Titov <oleg.titov@gmail.com>
 pkgname=lighthouse
 pkgver=4.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Ethereum 2.0 Client"
 url="https://lighthouse.sigmaprime.io/"
 arch="x86_64 aarch64"  # limited by upstream
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	clang15-dev
 	cmake
 	openssl-dev
@@ -33,7 +34,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release \
+	cargo auditable build --release \
 		--frozen \
 		--package lighthouse \
 		--features "portable"
diff --git a/testing/lsd/APKBUILD b/testing/lsd/APKBUILD
index 0608b48023abd9125675efd106701a2f3c9522a4..b0e75e4f3303cd15f1a43300a623e928ac7a4602 100644
--- a/testing/lsd/APKBUILD
+++ b/testing/lsd/APKBUILD
@@ -2,18 +2,18 @@
 # Maintainer: Saijin-Naib <Saijin-Naib_package-maintenance@outlook.com>
 pkgname=lsd
 pkgver=0.23.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Next-Gen ls command"
 url="https://github.com/Peltoche/lsd"
 arch="all !riscv64" # blocked by cargo
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/Peltoche/$pkgname/archive/refs/tags/$pkgver/lsd-$pkgver.tar.gz"
 options="net" # needed for downloading dependencies
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/lumins/APKBUILD b/testing/lumins/APKBUILD
index 0cd0a96cb195b1db1781b59b2a2873d5d83bda62..4fab0bfb0861d6f73817f82350203bb56b62a0b3 100644
--- a/testing/lumins/APKBUILD
+++ b/testing/lumins/APKBUILD
@@ -2,19 +2,19 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=lumins
 pkgver=0.4.0
-pkgrel=1
+pkgrel=2
 pkgdesc="tool for local file synchronizing"
 url="https://github.com/wchang22/LuminS"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le"  #limited by rust/cargo
 options="!check" #Test are passing but creation of apkindex crashes
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/wchang22/LuminS/archive/refs/tags/v$pkgver.tar.gz"
 builddir="$srcdir/LuminS-$pkgver"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 package() {
diff --git a/testing/macchina/APKBUILD b/testing/macchina/APKBUILD
index 51217d34f706c6b321d3710fd7556fdfffe6fbd7..37e43719e6e9d759ac0be2628be6395f98214a77 100644
--- a/testing/macchina/APKBUILD
+++ b/testing/macchina/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Dominika Liberda <ja@sdomi.pl>
 pkgname=macchina
 pkgver=6.1.8
-pkgrel=0
+pkgrel=1
 pkgdesc="System information fetcher, with an (unhealthy) emphasis on performance"
 url="https://github.com/Macchina-CLI/macchina"
 # arm: needs https://github.com/Macchina-CLI/libmacchina/commit/1afd21de2d38b82cb2821259e260fcfc8d0cabc0
 arch="all !armhf !armv7 !x86 !s390x !riscv64" # s390x and riscv64 blocked by cargo
 license="MIT"
-makedepends="cargo sqlite-dev"
+makedepends="cargo sqlite-dev cargo-auditable"
 options="net"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/Macchina-CLI/macchina/archive/refs/tags/v$pkgver.tar.gz"
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/mdcat/APKBUILD b/testing/mdcat/APKBUILD
index 271436c94942a84cc73fcbe544f5310b66e77159..90d4e4d60d69852c599fb99327c9b7a549a7734f 100644
--- a/testing/mdcat/APKBUILD
+++ b/testing/mdcat/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=mdcat
 pkgver=2.0.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Cat for markdown"
 url="https://github.com/swsnr/mdcat"
 #Undefined temporary symbol .LBB16_2
 arch="all !armhf"
 license="Apache-2.0"
-makedepends="asciidoctor cargo shared-mime-info openssl-dev>3"
+makedepends="asciidoctor cargo shared-mime-info openssl-dev>3 cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -31,7 +31,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/nitrocli/APKBUILD b/testing/nitrocli/APKBUILD
index ecdd96ec78ded4926f411de20455afa19c24023c..14cfb92276b3b9f66e9aa72e6cdbdf2d7a51f8d3 100644
--- a/testing/nitrocli/APKBUILD
+++ b/testing/nitrocli/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer:
 pkgname=nitrocli
 pkgver=0.4.1
-pkgrel=2
+pkgrel=3
 pkgdesc="A command line tool for interacting with Nitrokey devices"
 url="https://github.com/d-e-s-o/nitrocli"
 arch="x86_64 x86 armhf armv7 aarch64 ppc64le" # limited by rust/cargo
 license="GPL-3.0-or-later"
 depends="gnupg"
 checkdepends="python3" # used by the extension tests
-makedepends="cargo hidapi-dev libnitrokey-dev"
+makedepends="cargo hidapi-dev libnitrokey-dev cargo-auditable"
 subpackages="$pkgname-doc $pkgname-bash-completion"
 source="https://github.com/d-e-s-o/nitrocli/archive/v$pkgver/nitrocli-$pkgver.tar.gz
 	src-tests-run.rs-use-python3.patch
@@ -18,7 +18,7 @@ source="https://github.com/d-e-s-o/nitrocli/archive/v$pkgver/nitrocli-$pkgver.ta
 
 build() {
 	export USE_SYSTEM_LIBNITROKEY=1
-	cargo build --release --locked
+	cargo auditable build --release --locked
 	cargo run --bin=shell-complete bash > nitrocli
 }
 
diff --git a/testing/nixpacks/APKBUILD b/testing/nixpacks/APKBUILD
index ede681819196a888101734a4e78e305fabe9a896..8de3a985b13772dfaacc6bc622e540f5870686ec 100644
--- a/testing/nixpacks/APKBUILD
+++ b/testing/nixpacks/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: Tomio <mail@tom1o.space>
 pkgname=nixpacks
 pkgver=0.1.7
-pkgrel=0
+pkgrel=1
 pkgdesc="Generate an OCI compliant image based off app source."
 url="https://github.com/railwayapp/nixpacks"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by alpine's integration/bootstrapping (https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/35671#note_243623)
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/railwayapp/nixpacks/archive/v$pkgver/$pkgname-$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release
+	cargo auditable build --release
 }
 
 check() {
diff --git a/testing/nsh/APKBUILD b/testing/nsh/APKBUILD
index 8f1611729aa16ed1d9b83179b9a70eb3b477bef6..53256ba17d6b515be9bd8d2fe25c9d93627d713e 100644
--- a/testing/nsh/APKBUILD
+++ b/testing/nsh/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=nsh
 pkgver=0.4.2
-pkgrel=0
+pkgrel=1
 pkgdesc="A command-line shell like fish, but POSIX compatible"
 url="https://github.com/nuta/nsh"
 arch="aarch64 armhf armv7 ppc64le x86 x86_64"  # limited by rust/cargo
@@ -10,7 +10,7 @@ license="CC0-1.0 OR MIT"
 # bash is needed for completion
 depends="bash"
 checkdepends="python3 py3-termcolor"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 install="$pkgname.post-install $pkgname.pre-deinstall"
 subpackages="$pkgname-dbg"
 source="https://github.com/nuta/nsh/archive/v$pkgver/nsh-$pkgver.tar.gz"
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/nushell/APKBUILD b/testing/nushell/APKBUILD
index e2ce7bd8bce0a8533f9bfd63cd9d84c6626b4bc7..43082f9b173e5620454c114a434f085437982c84 100644
--- a/testing/nushell/APKBUILD
+++ b/testing/nushell/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: nibon7 <nibon7@163.com>
 pkgname=nushell
 pkgver=0.80.0
-pkgrel=0
+pkgrel=1
 pkgdesc="A new type of shell"
 url="https://www.nushell.sh"
 # s390x: nix crate
 arch="all !s390x"
 license="MIT"
-makedepends="cargo openssl-dev>3 libx11-dev libxcb-dev libgit2-dev"
+makedepends="cargo openssl-dev>3 libx11-dev libxcb-dev libgit2-dev cargo-auditable"
 checkdepends="bash"
 subpackages="$pkgname-plugins:_plugins"
 install="$pkgname.post-install $pkgname.post-upgrade $pkgname.pre-deinstall"
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --workspace --release --frozen
+	cargo auditable build --workspace --release --frozen
 }
 
 check() {
diff --git a/testing/ouch/APKBUILD b/testing/ouch/APKBUILD
index 0cff383d28e6af887b5d4ddcd786c09befb5736a..c9471607fea8fe5afb907c02679dd8e69732003b 100644
--- a/testing/ouch/APKBUILD
+++ b/testing/ouch/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=ouch
 pkgver=0.4.1
-pkgrel=1
+pkgrel=2
 pkgdesc="Painless compression and decompression"
 url="https://github.com/ouch-org/ouch"
 arch="all"
 license="MIT"
-makedepends="cargo bzip2-dev xz-dev zlib-dev zstd-dev"
+makedepends="cargo bzip2-dev xz-dev zlib-dev zstd-dev cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -31,7 +31,7 @@ prepare() {
 
 build() {
 	OUCH_ARTIFACTS_FOLDER=artifacts \
-		cargo build --frozen --release
+		cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/pastel/APKBUILD b/testing/pastel/APKBUILD
index dd54effc297708381e08b6d444ab1d3baee61366..4437679a952277d3700444989f78e3d0995c7e1c 100644
--- a/testing/pastel/APKBUILD
+++ b/testing/pastel/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Joe Searle <joe@jsearle.net>
 pkgname=pastel
 pkgver=0.9.0
-pkgrel=0
+pkgrel=1
 pkgdesc="A command-line tool to generate, analyze, convert and manipulate colors"
 url="https://github.com/sharkdp/pastel"
 arch="all !s390x !riscv64" # rust/cargo
 license="Apache-2.0"
-makedepends="rust cargo"
+makedepends="rust cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/sharkdp/pastel/archive/v$pkgver.tar.gz"
 subpackages="
 	$pkgname-bash-completion
@@ -19,7 +19,7 @@ options="net" # fetch crates
 
 build() {
 	export SHELL_COMPLETIONS_DIR="$builddir/completions"
-	cargo build --release
+	cargo auditable build --release
 }
 
 check() {
diff --git a/testing/pidif/APKBUILD b/testing/pidif/APKBUILD
index 255257f1b848d64320b2128429eb42915f9f5452..420f5238c4a19989bff5efbe4909fdbcd76bc66b 100644
--- a/testing/pidif/APKBUILD
+++ b/testing/pidif/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Yo'av Moshe <alpine@yoavmoshe.com>
 pkgname=pidif
 pkgver=0.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple PDF Reader"
 url="https://github.com/bjesus/pidif"
 arch="all !s390x !riscv64" # rust
@@ -9,6 +9,7 @@ license="GPL-3.0-or-later"
 makedepends="
 	cairo-dev
 	cargo
+	cargo-auditable
 	gtk4.0-dev
 	poppler-dev
 	"
@@ -22,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/pijul/APKBUILD b/testing/pijul/APKBUILD
index 62d966e1c06337db1b8902efdd2fbd535b269a98..e64cb303ce4bb35eb355f70f66399a4cc4e2ba4a 100644
--- a/testing/pijul/APKBUILD
+++ b/testing/pijul/APKBUILD
@@ -3,13 +3,14 @@
 pkgname=pijul
 pkgver=1.0.0_beta2
 _pkgver=1.0.0-beta.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Patch-based distributed version control system"
 url="https://pijul.org/"
 arch="all !s390x !riscv64" # Limited by cargo
 license="GPL-2.0-or-later"
 makedepends="
 	cargo
+	cargo-auditable
 	libsodium-dev
 	nettle-dev
 	openssl-dev
@@ -29,7 +30,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/piping-server/APKBUILD b/testing/piping-server/APKBUILD
index bfaa6f262c0087011bfcdca6c473063531f38a44..b63f060f4e35f54793ebe9631ac28f5029d2bffb 100644
--- a/testing/piping-server/APKBUILD
+++ b/testing/piping-server/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=piping-server
 pkgver=0.16.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Infinitely transfer data between devices over HTTP"
 url="https://github.com/nwtgck/piping-server-rust"
 license="MIT"
 arch="all !s390x !riscv64" # limited by cargo
 arch="$arch !ppc64le" # FTBFS
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="$pkgname-openrc"
 source="https://github.com/nwtgck/piping-server-rust/archive/v$pkgver/piping-server-rust-$pkgver.tar.gz
 	piping-server.initd
@@ -18,7 +18,7 @@ options="net" # fetch dependencies
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/please/APKBUILD b/testing/please/APKBUILD
index 2ce78718eb8ae93583f39e6f693861f4f9f384ca..6641b2e19ad6b7cbc8f1f2d05be0fefa2fb42b09 100644
--- a/testing/please/APKBUILD
+++ b/testing/please/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Ed Neville <ed@s5h.net>
 pkgname=please
 pkgver=0.4.2
-pkgrel=1
+pkgrel=2
 pkgdesc="sudo alternative with regex support"
 url="https://gitlab.com/edneville/please"
 arch="all !s390x !riscv64" # limited by rust/cargo
 license="GPL-3.0-or-later"
-makedepends="cargo linux-pam-dev chrpath"
+makedepends="cargo linux-pam-dev chrpath cargo-auditable"
 source="https://gitlab.com/edneville/please/-/archive/v$pkgver/please-v$pkgver.tar.gz
 	please.pam
 	"
@@ -17,7 +17,7 @@ subpackages="$pkgname-doc"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/pulumi-watch/APKBUILD b/testing/pulumi-watch/APKBUILD
index d63a850a9af79e3528e33752a8a048c99aa28462..f0f7f67e64cee6fa71cc3ec1c9cffc0427cde727 100644
--- a/testing/pulumi-watch/APKBUILD
+++ b/testing/pulumi-watch/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=pulumi-watch
 pkgver=0.1.5
-pkgrel=1
+pkgrel=2
 pkgdesc="Helper utility for pulumi watch command"
 url="https://github.com/pulumi/watchutil-rs"
 # blocked by pulumi
 arch="x86_64 aarch64"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 depends="pulumi"
 source="$pkgname-$pkgver.tar.gz::https://github.com/pulumi/watchutil-rs/archive/refs/tags/v$pkgver.tar.gz"
 builddir="$srcdir/watchutil-rs-$pkgver"
@@ -22,7 +22,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/pw-volume/APKBUILD b/testing/pw-volume/APKBUILD
index 0feee5710bba53a817b5077dab4921021929dc85..c62cbd8f204134d877c30c077800935d8994eea3 100644
--- a/testing/pw-volume/APKBUILD
+++ b/testing/pw-volume/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=pw-volume
 pkgver=0.5.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Basic interface to PipeWire volume controls"
 url="https://github.com/smasher164/pw-volume"
 arch="all !s390x" # blocked by pipewire -> libcamera -> libcamera-ipa
 license="MIT"
 depends="cmd:pw-cli cmd:pw-dump"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/smasher164/pw-volume/archive/v$pkgver/pw-volume-$pkgver.tar.gz
 	update-lockfile.patch
 	"
@@ -31,7 +31,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/py-spy/APKBUILD b/testing/py-spy/APKBUILD
index 46d97073f75edcd44f8ba28d3a618579f78c7153..f8375847ae595b5e5811cdfe7f07927dd185f339 100644
--- a/testing/py-spy/APKBUILD
+++ b/testing/py-spy/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: messense <messense@icloud.com>
 pkgname=py-spy
 pkgver=0.3.14
-pkgrel=0
+pkgrel=1
 pkgdesc="Sampling profiler for Python programs"
 url="https://github.com/benfred/py-spy"
 arch="aarch64 armv7 armhf x86_64 ppc64le" # limited by rust
 license="MIT"
-makedepends="cargo zlib-dev libunwind-dev xz-dev"
+makedepends="cargo zlib-dev libunwind-dev xz-dev cargo-auditable"
 checkdepends="python3 bash"
 subpackages="
 	$pkgname-doc
@@ -19,7 +19,7 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/benfred/py-spy/archive/v$pkg
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 
 	./target/release/py-spy completions bash > $pkgname.bash
 	./target/release/py-spy completions fish > $pkgname.fish
diff --git a/testing/rage/APKBUILD b/testing/rage/APKBUILD
index 9e573766cf068b97a622f7ee907d1f98129f4403..a9c84571c5c3b24e70185eb9ecb51b7057d2eb67 100644
--- a/testing/rage/APKBUILD
+++ b/testing/rage/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rage
 pkgver=0.9.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple, modern and secure encryption tool"
 url="https://github.com/str4d/rage"
 license="Apache-2.0 OR MIT"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo fuse3-dev"
+makedepends="cargo fuse3-dev cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --features mount
+	cargo auditable build --frozen --release --features mount
 
 	cargo run --frozen --release --example generate-docs
 	cargo run --frozen --release --example generate-completions
diff --git a/testing/rathole/APKBUILD b/testing/rathole/APKBUILD
index 6aabd7e93f59d0f3c6a9ae028edfd4b6192ba7cc..36963e1a173f5687000439127992cd48d056c6da 100644
--- a/testing/rathole/APKBUILD
+++ b/testing/rathole/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rathole
 pkgver=0.4.7
-pkgrel=0
+pkgrel=1
 pkgdesc="High-performance reverse proxy for NAT traversal"
 url="https://github.com/rapiz1/rathole"
 license="Apache-2.0"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 source="https://github.com/rapiz1/rathole/archive/v$pkgver/rathole-$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/rav1e/APKBUILD b/testing/rav1e/APKBUILD
index 6c740faf6a567a36ec4de6641143900b4888dd3f..fb2ba47a4b9789db042b4a724d02423a0df09183 100644
--- a/testing/rav1e/APKBUILD
+++ b/testing/rav1e/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Oleg Titov <oleg.titov@gmail.com>
 pkgname=rav1e
 pkgver=0.6.6
-pkgrel=0
+pkgrel=1
 pkgdesc="The fastest and safest AV1 encoder"
 url="https://github.com/xiph/rav1e"
 arch="all"
 license="BSD-2-Clause custom"
-makedepends="cargo cargo-c nasm"
+makedepends="cargo cargo-c nasm cargo-auditable"
 subpackages="$pkgname-static $pkgname-dev $pkgname-doc $pkgname-libs"
 source="$pkgname-$pkgver.tar.gz::https://github.com/xiph/rav1e/archive/v$pkgver.tar.gz
 	$pkgname-$pkgver.lock::https://github.com/xiph/rav1e/releases/download/v$pkgver/Cargo.lock
@@ -33,7 +33,7 @@ prepare() {
 build() {
 	export CARGO_PROFILE_RELEASE_OPT_LEVEL=3
 
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 	cargo cbuild \
 		--release \
 		--frozen \
diff --git a/testing/rbw/APKBUILD b/testing/rbw/APKBUILD
index d7eff7985492cc47e81b460d81669c3d7731b324..ee118967fa826e7b5cd500f12fec77a7866cc326 100644
--- a/testing/rbw/APKBUILD
+++ b/testing/rbw/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: crapStone <crapstone01@gmail.com>
 pkgname=rbw
 pkgver=1.7.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Unofficial command line client for Bitwarden."
 url="https://git.tozt.net/rbw"
 arch="all !s390x !riscv64 !ppc64le" # limited by cargo, dependency ring does not support ppc64le
 license="MIT"
 depends="pinentry"
-makedepends="rust cargo"
+makedepends="rust cargo cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 
 	target/release/rbw gen-completions bash > rbw.bash
 	target/release/rbw gen-completions fish > rbw.fish
diff --git a/testing/rdedup/APKBUILD b/testing/rdedup/APKBUILD
index 50128d6d840daa4a6a95f06b6731556f9422858d..846398be1fc4e9417b50aa19b5ebd4772a1c9d1e 100644
--- a/testing/rdedup/APKBUILD
+++ b/testing/rdedup/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer:
 pkgname=rdedup
 pkgver=3.2.1
-pkgrel=2
+pkgrel=3
 pkgdesc="Data deduplication with compression and public key encryption"
 url="https://github.com/dpc/rdedup"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by cargo
 license="MPL-2.0"
-makedepends="cargo clang-dev libsodium-dev openssl-dev>3 xz-dev"
+makedepends="cargo clang-dev libsodium-dev openssl-dev>3 xz-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/dpc/rdedup/archive/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/rezolus/APKBUILD b/testing/rezolus/APKBUILD
index 3084e5ca9b9da41f4f0f5c74c9cea120c0a979c6..7ce19b10be957f14c65448fc2c60a4c1110b8903 100644
--- a/testing/rezolus/APKBUILD
+++ b/testing/rezolus/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=rezolus
 pkgver=2.11.1
-pkgrel=2
+pkgrel=3
 pkgdesc="Systems performance telemetry"
 url="https://github.com/twitter/rezolus/"
 arch="x86_64 x86 armv7 armhf aarch64 ppc64le"  # limited by rust/cargo
 license="Apache-2.0"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 install="$pkgname.pre-install"
 subpackages="$pkgname-openrc $pkgname-doc"
 source="https://github.com/twitter/rezolus/archive/v$pkgver/rezolus-$pkgver.tar.gz
@@ -29,7 +29,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/riemann-cli/APKBUILD b/testing/riemann-cli/APKBUILD
index 732486f5b42d07516f82909285ed7692ae02cd65..2df8100cd7e6d505e4d78d6b8cd351d1ac841c7b 100644
--- a/testing/riemann-cli/APKBUILD
+++ b/testing/riemann-cli/APKBUILD
@@ -4,12 +4,12 @@ pkgname=riemann-cli
 _projname=rust-riemann_client
 # CAUTION: Regenerate Cargo.lock when upgrading to a new version.
 pkgver=0.8.0
-pkgrel=1
+pkgrel=2
 pkgdesc="CLI client for Riemann written in Rust"
 url="https://github.com/borntyping/rust-riemann_client"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le"  # limited by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 # TODO: Convince upstream to include Cargo.lock in repository.
 source="https://github.com/borntyping/rust-riemann_client/archive/v$pkgver/$pkgname-$pkgver.tar.gz
 	no-unstable.patch
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/ripasso-cursive/APKBUILD b/testing/ripasso-cursive/APKBUILD
index ca189e4d0725a11566c81b2da74e6840c1665762..0040dceecbabd3b6afc2fc6730c0b9dd99225823 100644
--- a/testing/ripasso-cursive/APKBUILD
+++ b/testing/ripasso-cursive/APKBUILD
@@ -2,13 +2,14 @@
 pkgname=ripasso-cursive
 _pkgrelname=ripasso
 pkgver=0.6.4
-pkgrel=0
+pkgrel=1
 pkgdesc="A password manager that uses the file format of the standard unix password manager 'pass', implemented in rust."
 url="https://github.com/cortex/ripasso/"
 arch="all !s390x !riscv64 !armhf"
 license="GPL-3.0-or-later"
 makedepends="
 	cargo
+	cargo-auditable
 	clang-dev
 	gpgme-dev
 	libgpg-error-dev
@@ -28,7 +29,7 @@ prepare() {
 }
 
 build() {
-	cargo build -p ripasso-cursive --release --frozen
+	cargo auditable build -p ripasso-cursive --release --frozen
 }
 
 check() {
diff --git a/testing/rome/APKBUILD b/testing/rome/APKBUILD
index 583e22d498e7e224bce001c883b37aa8f99ec609..81f00ec70cb054eba0c47271b3d3e64766fb9c6c 100644
--- a/testing/rome/APKBUILD
+++ b/testing/rome/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rome
 pkgver=12.0.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Unified developer tools for JavaScript, TypeScript, and the web"
 url="https://rome.tools/"
 license="MIT"
 arch="aarch64 x86_64" # architectures supported by upstream
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/rome/tools/archive/cli/v$pkgver/rome-$pkgver.tar.gz"
 builddir="$srcdir/tools-cli-v$pkgver"
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	ROME_VERSION="$pkgver" cargo build -p rome_cli --frozen --release
+	ROME_VERSION="$pkgver" cargo auditable build -p rome_cli --frozen --release
 }
 
 check() {
diff --git a/testing/rosenpass/APKBUILD b/testing/rosenpass/APKBUILD
index 38c70b8aaad3cc154ac094c770ad1988fc17625a..c9aa62f224862426005080e5fdf8f628f677674a 100644
--- a/testing/rosenpass/APKBUILD
+++ b/testing/rosenpass/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: guddaff <alpine@guddaff.de>
 pkgname=rosenpass
 pkgver=0.1.1
-pkgrel=2
+pkgrel=3
 pkgdesc="Formally verified, post-quantum secure VPN using WireGuard"
 url="https://rosenpass.eu/"
 license="MIT OR Apache-2.0"
 # armv7/riscv64 cmake fails (OQS), armhf build freezes
 arch="all !armv7 !armhf !riscv64 "
-makedepends="cargo clang-dev cmake libsodium-dev linux-headers"
+makedepends="cargo clang-dev cmake libsodium-dev linux-headers cargo-auditable"
 source="https://github.com/rosenpass/rosenpass/archive/v$pkgver/rosenpass-$pkgver.tar.gz"
 
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/rpg-cli/APKBUILD b/testing/rpg-cli/APKBUILD
index 2c5613d4ba9745c3c65f9cf5b651a38b152a8875..8369e4ffede3ff53596877baba280ea9fd4f79df 100644
--- a/testing/rpg-cli/APKBUILD
+++ b/testing/rpg-cli/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rpg-cli
 pkgver=1.0.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Your filesystem as a dungeon!"
 url="https://github.com/facundoolano/rpg-cli"
 license="MIT"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/facundoolano/rpg-cli/archive/$pkgver/rpg-cli-$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/rss-email/APKBUILD b/testing/rss-email/APKBUILD
index 9e9218729e6216d73d394866a53e48a28e7e35f3..546f17b79a6b3aa07465da382666b52261f76f62 100644
--- a/testing/rss-email/APKBUILD
+++ b/testing/rss-email/APKBUILD
@@ -2,13 +2,14 @@
 pkgname=rss-email
 pkgdesc="Send RSS/Atom posts as email"
 pkgver=0.4.4
-pkgrel=0
+pkgrel=1
 url="https://git.sr.ht/~witcher/rss-email"
 # ppc64le, s390x, riscv64: rust-ring
 arch="all !ppc64le !s390x !riscv64"
 license="WTFPL"
 makedepends="
 	cargo
+	cargo-auditable
 	scdoc
 	"
 subpackages="$pkgname-doc"
@@ -24,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 	scdoc < docs/rss-email.1.scd > rss-email.1
 	scdoc < docs/rss-email.5.scd > rss-email.5
 }
diff --git a/testing/rust-bindgen/APKBUILD b/testing/rust-bindgen/APKBUILD
index 23144233c5b30bba6a18b021fbc67fdab0ce25d8..f7520b19815296c870fb3c59d428d6dba9518a41 100644
--- a/testing/rust-bindgen/APKBUILD
+++ b/testing/rust-bindgen/APKBUILD
@@ -3,10 +3,10 @@
 
 pkgname=rust-bindgen
 pkgver=0.64.0
-pkgrel=0
+pkgrel=1
 pkgdesc="automatically generates Rust FFI bindings to C (and some C++) libraries"
 url="https://github.com/rust-lang/rust-bindgen"
-makedepends="cargo clang"
+makedepends="cargo clang cargo-auditable"
 arch="all"
 license="BSD-3-Clause"
 options="net !check" # no test
@@ -21,7 +21,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/rust-script/APKBUILD b/testing/rust-script/APKBUILD
index ac6c586d9909f6d9875706546f810f2773997c1f..63f3e4c08236fd1a8559e1eaab47f4514d864b28 100644
--- a/testing/rust-script/APKBUILD
+++ b/testing/rust-script/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=rust-script
 pkgver=0.22.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Run Rust files and expressions as scripts without any setup or compilation step"
 url="https://rust-script.org/"
 license="Apache-2.0 OR MIT"
 arch="all !armhf" # tests hang
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/fornwall/rust-script/archive/$pkgver/rust-script-$pkgver.tar.gz"
 
 case "$CARCH" in
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/rustdesk-server/APKBUILD b/testing/rustdesk-server/APKBUILD
index acbc88ff4ade87ddaeb0c2b0c77758dd4e597499..53609609b7366e6c7bcace80ca9403b67e1df9ce 100644
--- a/testing/rustdesk-server/APKBUILD
+++ b/testing/rustdesk-server/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: alealexpro100 <alealexn@gmail.com>
 pkgname=rustdesk-server
 pkgver=1.1.7
-pkgrel=0
+pkgrel=1
 pkgdesc="RustDesk Server Program"
 url="https://github.com/rustdesk/rustdesk-server"
 # ppc64le and s390x and riscv64 blocked by ring crate
 arch="all !ppc64le !s390x !riscv64"
 license="GPL-3.0-or-later"
 options="!check net" # RustDesk server has no tests yet
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="
 	$pkgname-openrc
 	"
@@ -29,7 +29,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/rustic/APKBUILD b/testing/rustic/APKBUILD
index 0ba2ec91c11a71f532a054fe83e7886521959429..11886cc2568e3f2b089b104158511258815c3b86 100644
--- a/testing/rustic/APKBUILD
+++ b/testing/rustic/APKBUILD
@@ -3,13 +3,13 @@
 pkgname=rustic
 # NOTE: do not move out of the testing repository until upstream says it's no longer beta-quality software
 pkgver=0.5.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Fast, encrypted, deduplicated backups"
 url="https://github.com/rustic-rs/rustic"
 license="MIT OR Apache-2.0"
 arch="all !ppc64le !riscv64" # fails to build ring crate
 arch="$arch !s390x" # fails to build nix crate
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 
 	target/release/rustic completions bash > $pkgname.bash
 	target/release/rustic completions fish > $pkgname.fish
diff --git a/testing/rustscan/APKBUILD b/testing/rustscan/APKBUILD
index 6a43a9f325aeeb3861a99d6d5e5450fc033a474f..c6a8d30da9ba62631cc5770fffa821b8a7c2ccd4 100644
--- a/testing/rustscan/APKBUILD
+++ b/testing/rustscan/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: guddaff <guddaff@protonmail.com>
 pkgname=rustscan
 pkgver=2.1.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Modern Port Scanner"
 url="https://github.com/RustScan/RustScan"
 license="GPL-3.0-or-later"
 # ppc64le and s390x and riscv64 blocked by ring crate
 # armhf timout while building
 arch="all !ppc64le !armhf !s390x !riscv64"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 checkdepends="bash perl python3"
 source="https://github.com/RustScan/RustScan/archive/$pkgver/rustscan-$pkgver.tar.gz
 	Cargo.lock.patch
@@ -25,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/rustypaste-cli/APKBUILD b/testing/rustypaste-cli/APKBUILD
index d00bce2f6dd5b9db68c0acf30ba7ed554d59588e..abe8ab614cf06df33cf5e9ced1fd1660bdcceaca 100644
--- a/testing/rustypaste-cli/APKBUILD
+++ b/testing/rustypaste-cli/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Orhun Parmaksız <orhunparmaksiz@gmail.com>
 pkgname=rustypaste-cli
 pkgver=0.3.0
-pkgrel=0
+pkgrel=1
 pkgdesc="CLI tool for rustypaste"
 url="https://github.com/orhun/rustypaste-cli"
 # s390x, ppc64le, riscv64: blocked by ring crate
 arch="all !s390x !ppc64le !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="$pkgname-doc"
 options="net"
 source="$pkgname-$pkgver.tar.gz::https://github.com/orhun/rustypaste-cli/archive/v$pkgver.tar.gz"
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/rustypaste/APKBUILD b/testing/rustypaste/APKBUILD
index 0e59ec9693185974925ec3901030303b668bc2e0..bde7b1955cc38c0b8fde5fcd7fe86c9cddf45abf 100644
--- a/testing/rustypaste/APKBUILD
+++ b/testing/rustypaste/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Orhun Parmaksız <orhunparmaksiz@gmail.com>
 pkgname=rustypaste
 pkgver=0.9.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Minimal file upload/pastebin service"
 url="https://github.com/orhun/rustypaste"
 # s390x, ppc64le, riscv64: blocked by ring crate
 arch="all !s390x !ppc64le !riscv64"
 license="MIT"
-makedepends="cargo zstd-dev openssl-dev"
+makedepends="cargo zstd-dev openssl-dev cargo-auditable"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/orhun/rustypaste/archive/v$pkgver.tar.gz"
 options="net"
@@ -30,7 +30,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --no-default-features --features openssl
+	cargo auditable build --frozen --release --no-default-features --features openssl
 }
 
 check() {
diff --git a/testing/scryer-prolog/APKBUILD b/testing/scryer-prolog/APKBUILD
index 0cd0b90017307b56bdb0c711efa520b450acc47e..b6b8554753ebcd91f12859426cb3305388d8978a 100644
--- a/testing/scryer-prolog/APKBUILD
+++ b/testing/scryer-prolog/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Adrián Arroyo Calle <adrian.arroyocalle@gmail.com>
 pkgname=scryer-prolog
 pkgver=0.9.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Modern Prolog implementation written in Rust"
 url="https://github.com/mthom/scryer-prolog"
 # s390x, riscv64: rust
@@ -12,6 +12,7 @@ arch="aarch64 x86_64"
 license="BSD-3-Clause"
 makedepends="
 	cargo
+	cargo-auditable
 	gmp-dev
 	libsodium-dev
 	m4
@@ -35,7 +36,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/sd/APKBUILD b/testing/sd/APKBUILD
index 7fe99fb05d630ec5ae07f18611c6cf8aa1190372..6ba5ddb667ca17184cdc2d6b111b1f90412baa1b 100644
--- a/testing/sd/APKBUILD
+++ b/testing/sd/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer:
 pkgname=sd
 pkgver=0.7.6
-pkgrel=2
+pkgrel=3
 pkgdesc="An intuitive find & replace CLI"
 url="https://github.com/chmln/sd"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust/cargo
 license="MIT"
 options="net"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/chmln/sd/archive/v$pkgver.tar.gz"
 subpackages="$pkgname-doc
 	$pkgname-bash-completion
@@ -19,7 +19,7 @@ subpackages="$pkgname-doc
 export CARGO_HOME="$srcdir"/cargo
 
 build() {
-	cargo build \
+	cargo auditable build \
 		--release \
 		--verbose
 }
diff --git a/testing/sequoia-chameleon-gnupg/APKBUILD b/testing/sequoia-chameleon-gnupg/APKBUILD
index 9dce8f8e15f23485b761b2b7541a6dedb26ccaab..d7eb590a94999561394c40ae4c0dd4eb897c0258 100644
--- a/testing/sequoia-chameleon-gnupg/APKBUILD
+++ b/testing/sequoia-chameleon-gnupg/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=sequoia-chameleon-gnupg
 pkgver=0.2.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Sequoia's reimplementation of the GnuPG interface"
 url="https://sequoia-pgp.org/"
 # ring
@@ -10,6 +10,7 @@ license="GPL-3.0-or-later"
 makedepends="
 	bzip2-dev
 	cargo
+	cargo-auditable
 	clang-dev
 	nettle-dev
 	openssl-dev
@@ -27,7 +28,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/sequoia-sqv/APKBUILD b/testing/sequoia-sqv/APKBUILD
index 490b704e39e556ec0b7f1e0391cab1628bf08653..64843ccd6fad977fb51ca68f6352f2129cb77a45 100644
--- a/testing/sequoia-sqv/APKBUILD
+++ b/testing/sequoia-sqv/APKBUILD
@@ -2,13 +2,14 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=sequoia-sqv
 pkgver=1.1.0
-pkgrel=1
+pkgrel=2
 pkgdesc="simple signature verification program"
 url="https://sequoia-pgp.org/"
 arch="all"
 license="GPL-2.0-or-later"
 makedepends="
 	cargo
+	cargo-auditable
 	clang-dev
 	nettle-dev
 	"
@@ -31,7 +32,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/shotman/APKBUILD b/testing/shotman/APKBUILD
index 1a203b232a0a3694511746cc39a4f5615d9d4a2a..f07f6776b9a35f4da83b1e9c27ef6a33e50d7fce 100644
--- a/testing/shotman/APKBUILD
+++ b/testing/shotman/APKBUILD
@@ -1,14 +1,14 @@
 # Maintainer: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
 pkgname=shotman
 pkgver=0.4.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Uncompromising screenshot GUI for Wayland"
 url="https://git.sr.ht/~whynothugo/shotman"
 # s390x: nix/libc crate
 arch="all !s390x"
 license="ISC"
 depends="slurp"
-makedepends="cargo libxkbcommon-dev scdoc"
+makedepends="cargo libxkbcommon-dev scdoc cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -34,7 +34,7 @@ prepare() {
 
 build() {
 	export SHOTMAN_VERSION=$pkgver
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 	scdoc < shotman.1.scd > shotman.1
 	./target/release/shotman_completions bash > $pkgname.bash
 	./target/release/shotman_completions fish > $pkgname.fish
diff --git a/testing/signal-desktop/APKBUILD b/testing/signal-desktop/APKBUILD
index c23477c83a81424a49ff202d20ef6662cf99bdf8..a3b47b2714d92e2735c3239deb6952dde8eaa0bd 100644
--- a/testing/signal-desktop/APKBUILD
+++ b/testing/signal-desktop/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=signal-desktop
 pkgver=6.18.1
-pkgrel=0
+pkgrel=1
 pkgdesc="A messaging app for simple private communication with friends"
 url="https://github.com/signalapp/Signal-Desktop/"
 # same as electron
@@ -20,6 +20,7 @@ makedepends="
 	alsa-lib-dev
 	bsd-compat-headers
 	cargo
+	cargo-auditable
 	cbindgen
 	clang-dev
 	cmake
@@ -319,7 +320,7 @@ build() {
 
 		msg "Building libringrtc"
 		OUTPUT_DIR="$srcdir"/ringrtc-$_ringrtcver/out \
-			cargo build --features electron --release
+			cargo auditable build --features electron --release
 
 		mkdir -p ../node/build/linux
 		cp -fv ../../out/release/libsignaldeswebrtc.so ../node/build/linux/libsignaldeswebrtc.so
@@ -357,7 +358,7 @@ build() {
 		cd "$srcdir"/Signal-FTS5-Extension-$_stokenizerver
 
 		msg "Building signal tokenizer"
-		cargo build --features extension --release --frozen
+		cargo auditable build --features extension --release --frozen
 		cbindgen --profile release . -o target/release/signal-tokenizer.h
 	)
 
diff --git a/testing/so/APKBUILD b/testing/so/APKBUILD
index 0c80e7479afa699ac24afd73d8bece7c09685942..2082eeb81fd4f04424c9bc51209139ae74049173 100644
--- a/testing/so/APKBUILD
+++ b/testing/so/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=so
 pkgver=0.4.9
-pkgrel=0
+pkgrel=1
 pkgdesc="Terminal interface for Stackoverflow"
 url="https://github.com/samtay/so"
 arch="all"
 license="MIT"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/samtay/so/archive/refs/tags/v$pkgver.tar.gz"
 
 [ "$CARCH" = "riscv64" ] && options="$options textrels"
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/spotify-player/APKBUILD b/testing/spotify-player/APKBUILD
index 60e925b3acc31a083c8d1762e668f78d2118f7d5..28a7a22da1650d003e7c8edcc6bc7b1e86bed779 100644
--- a/testing/spotify-player/APKBUILD
+++ b/testing/spotify-player/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Thomas Kienlen <kommander@laposte.net>
 pkgname=spotify-player
 pkgver=0.12.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Command driven spotify player"
 url="https://github.com/aome510/spotify-player"
 arch="x86_64 aarch64 x86 ppc64le" # limited by rust/cargo, does not compile on armv7, armhf
@@ -10,6 +10,7 @@ license="MIT"
 makedepends="
 	alsa-lib-dev
 	cargo
+	cargo-auditable
 	dbus-dev
 	openssl-dev
 	wayland-dev
@@ -24,7 +25,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen \
+	cargo auditable build --release --frozen \
 		--no-default-features --features 'alsa-backend,media-control,notify,streaming'
 }
 
diff --git a/testing/spotify-tui/APKBUILD b/testing/spotify-tui/APKBUILD
index f154546d74e8785e63cd1c64151487e13e6e2bea..7ff2d342dec57f85864b76bb2cb407dd2c6a924e 100644
--- a/testing/spotify-tui/APKBUILD
+++ b/testing/spotify-tui/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Thomas Kienlen <kommander@laposte.net>
 pkgname=spotify-tui
 pkgver=0.25.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Spotify for the terminal written in Rust"
 url="https://github.com/Rigellute/spotify-tui"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust/cargo
 license="MIT"
-makedepends="rust cargo openssl-dev libxcb-dev python3"
+makedepends="rust cargo openssl-dev libxcb-dev python3 cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/Rigellute/spotify-tui/archive/v$pkgver/spotifyd-$pkgver.tar.gz
 	openssl3.patch
 	"
@@ -28,7 +28,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --locked --target-dir "target/"
+	cargo auditable build --release --locked --target-dir "target/"
 }
 
 check() {
diff --git a/testing/svgbob/APKBUILD b/testing/svgbob/APKBUILD
index 41d6c0dc7cd2dac58bc2c2f157f2893214b24d02..7138a2037271e8863ebd5c3dcdb7b5db6613fa6b 100644
--- a/testing/svgbob/APKBUILD
+++ b/testing/svgbob/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Erwan Rouchet <lucidiot@brainshit.fr>
 pkgname=svgbob
 pkgver=0.6.6
-pkgrel=0
+pkgrel=1
 pkgdesc="Convert your ascii diagram scribbles into happy little SVG"
 url="https://github.com/ivanceras/svgbob"
 arch="all !s390x !riscv64" # limited by rust/cargo
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/ivanceras/svgbob/archive/$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/swayhide/APKBUILD b/testing/swayhide/APKBUILD
index 6d929f4c91d816b90712c9153f336e273858d775..fb29a75151222ac881493ca8d82a764211e0985d 100644
--- a/testing/swayhide/APKBUILD
+++ b/testing/swayhide/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Edd Salkield <edd@salkield.uk>
 pkgname=swayhide
 pkgver=0.2.1
-pkgrel=0
+pkgrel=1
 pkgdesc="A window swallower for swaywm"
 url="https://github.com/NomisIV/swayhide/"
 arch="all !s390x !riscv64" # rust
 license="GPL-3.0-only"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/NomisIV/swayhide/archive/v$pkgver/swayhide-v$pkgver.tar.gz"
 
 
@@ -17,7 +17,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/swc/APKBUILD b/testing/swc/APKBUILD
index 7691c8571e449451ff16d9d8d8bc4f0bbc63e204..25ee279f28f89cef9f6627191bfaa32f8d3d0e60 100644
--- a/testing/swc/APKBUILD
+++ b/testing/swc/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=swc
 pkgver=1.3.37
-pkgrel=0
+pkgrel=1
 pkgdesc="A super-fast TypeScript / JavaScript compiler written in Rust"
 url="https://swc.rs"
 # riscv64: it would take eternity to build
 arch="all !riscv64"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/swc-project/swc/archive/v$pkgver/$pkgname-$pkgver.tar.gz"
 builddir="$srcdir/$pkgname-$pkgver/bindings"
 # !check: TODO: run tests
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build -p swc_cli --release --locked
+	cargo auditable build -p swc_cli --release --locked
 }
 
 package() {
diff --git a/testing/swhkd/APKBUILD b/testing/swhkd/APKBUILD
index fc81a3231f3ab00b0f870c9d2becf87ef63fdc27..ab101ef9bc7043a48bc026374eb5b236362eea16 100644
--- a/testing/swhkd/APKBUILD
+++ b/testing/swhkd/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=swhkd
 pkgver=1.2.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Sxhkd clone for Wayland"
 url="https://github.com/waycrate/swhkd"
 # s390x: fails to build due to libc crate
@@ -9,7 +9,7 @@ arch="all !s390x"
 license="BSD-2-Clause"
 # requires pkexec
 depends="polkit"
-makedepends="cargo scdoc"
+makedepends="cargo scdoc cargo-auditable"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/waycrate/swhkd/archive/refs/tags/$pkgver.tar.gz
 	lock.patch
@@ -29,7 +29,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen --bins
+	cargo auditable build --release --frozen --bins
 
 	mkdir -p man/man5
 	mkdir -p man/man1
diff --git a/testing/swww/APKBUILD b/testing/swww/APKBUILD
index bbad6303a74311c9f7ba0cbfb659cfc95d20503a..072667b372e175a3a68cd066550f34e753fcf26d 100644
--- a/testing/swww/APKBUILD
+++ b/testing/swww/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=swww
 pkgver=0.7.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Efficient animated wallpaper daemon for Wayland compositors"
 url="https://github.com/Horus645/swww"
 arch="all !s390x !riscv64" # Build failed
 license="GPL-3.0-or-later"
-makedepends="scdoc cargo libxkbcommon-dev wayland-dev"
+makedepends="scdoc cargo libxkbcommon-dev wayland-dev cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 	sh ./doc/gen.sh
 }
 
diff --git a/testing/synapse-bt/APKBUILD b/testing/synapse-bt/APKBUILD
index 1157d63102fedf2bc9669e22226a450e4d127df1..29796e23e33e9f3d5cbf9222bb12aed17dd550a8 100644
--- a/testing/synapse-bt/APKBUILD
+++ b/testing/synapse-bt/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: prspkt <prspkt@protonmail.com>
 pkgname=synapse-bt
 pkgver=1.0
-pkgrel=3
+pkgrel=4
 pkgdesc="Flexible and fast BitTorrent daemon"
 url="https://github.com/Luminarys/synapse"
 arch="all !aarch64 !s390x !riscv64" # Cargo (aarch64 due to MAP_32BIT)
 license="ISC"
 pkgusers="synapse-bt"
 pkggroups="synapse-bt"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 install="synapse-bt.pre-install"
 subpackages="$pkgname-openrc $pkgname-cli:cli"
 source="synapse-bt-$pkgver.tar.gz::https://github.com/Luminarys/synapse/archive/$pkgver.tar.gz
@@ -20,7 +20,7 @@ builddir="$srcdir"/synapse-$pkgver
 
 
 build() {
-	cargo build --release --all --locked
+	cargo auditable build --release --all --locked
 }
 
 check() {
diff --git a/testing/systeroid/APKBUILD b/testing/systeroid/APKBUILD
index 842c45fe652dcd9b225e154f737a0e65c391155c..b90aa56fde5e5e5748d86d06ad816da6b49ce3fc 100644
--- a/testing/systeroid/APKBUILD
+++ b/testing/systeroid/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: omni <omni+alpine@hack.org>
 pkgname=systeroid
 pkgver=0.4.1
-pkgrel=0
+pkgrel=1
 pkgdesc="A more powerful alternative to sysctl(8)"
 # riscv64: rust broken
 arch="all !riscv64"
 url="https://systeroid.cli.rs/"
 license="Apache-2.0"
-makedepends="cargo libxcb-dev"
+makedepends="cargo libxcb-dev cargo-auditable"
 checkdepends="linux-lts-doc xclip"
 subpackages="$pkgname-doc $pkgname-tui:_tui $pkgname-tui-doc:_tui_doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/orhun/systeroid/archive/refs/tags/v$pkgver.tar.gz"
@@ -29,11 +29,11 @@ build() {
 	case "$CARCH" in
 	s390x)
 		# Fail to build nix crate
-		cargo build --release --frozen -p systeroid
-		cargo build --release --frozen --no-default-features -p systeroid-tui
+		cargo auditable build --release --frozen -p systeroid
+		cargo auditable build --release --frozen --no-default-features -p systeroid-tui
 		;;
 	*)
-		cargo build --release --frozen
+		cargo auditable build --release --frozen
 		;;
 	esac
 }
diff --git a/testing/tauri-cli/APKBUILD b/testing/tauri-cli/APKBUILD
index eff616f38aae7e487e5eea94f3cc89ef1aef2451..d81c9b7be429265fa11266c8c399e613c2dc18f5 100644
--- a/testing/tauri-cli/APKBUILD
+++ b/testing/tauri-cli/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=tauri-cli
 pkgver=1.3.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Tauri cargo cli tool"
 url="https://github.com/tauri-apps/tauri"
 # tauri doesn't support the others anyway
 arch="aarch64 armv7 x86 x86_64"
 license="Apache-2.0 OR MIT"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/tauri-apps/tauri/releases/download/cli.rs-v$pkgver/cli.rs-$pkgver.crate"
 options="net !check" # no tests
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/tealdeer/APKBUILD b/testing/tealdeer/APKBUILD
index 50ab350c83cd9c73cb5f7d4b535f9f9aa860e652..2503c8cecf584c4fa2b81d565c0feafd93583d0b 100644
--- a/testing/tealdeer/APKBUILD
+++ b/testing/tealdeer/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=tealdeer
 pkgver=1.6.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Very fast implementation of tldr in Rust"
 url="https://dbrgn.github.io/tealdeer/"
 arch="all"
 license="MIT AND Apache-2.0"
-makedepends="cargo openssl-dev"
+makedepends="cargo openssl-dev cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/teapot-tools/APKBUILD b/testing/teapot-tools/APKBUILD
index d38dbff5ae456c00ae600c1193333141fc6dd81f..e6555e94259a60db71efc4a2824880b64e199406 100644
--- a/testing/teapot-tools/APKBUILD
+++ b/testing/teapot-tools/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
 pkgname=teapot-tools
 pkgver=0.4.2
-pkgrel=0
+pkgrel=1
 pkgdesc="Replacement for depot_tools (gclient) and luci-go (cipd)"
 url="https://codeberg.org/selfisekai/teapot_tools"
 # armhf: ci hangs
@@ -13,10 +13,11 @@ license="Apache-2.0"
 depends="git"
 makedepends="
 	cargo
+	cargo-auditable
 	openssl-dev
 	protoc
 	python3-dev
-"
+	"
 source="teapot_tools-$pkgver.tar.gz::https://codeberg.org/selfisekai/teapot_tools/archive/v$pkgver.tar.gz"
 builddir="$srcdir/teapot_tools"
 
@@ -28,8 +29,8 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --bin download_from_google_storage
-	cargo build --frozen --release --bin gclient
+	cargo auditable build --frozen --release --bin download_from_google_storage
+	cargo auditable build --frozen --release --bin gclient
 }
 
 check() {
diff --git a/testing/texlab/APKBUILD b/testing/texlab/APKBUILD
index 27727a14b6537db99b4bd6052191d3dcb494509e..ec2e4a6309cd9fd837cf01d4b526c93f3a05333a 100644
--- a/testing/texlab/APKBUILD
+++ b/testing/texlab/APKBUILD
@@ -2,14 +2,14 @@
 # Contributor: Dominika Liberda <ja@sdomi.pl>
 pkgname=texlab
 pkgver=5.6.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Implementation of the Language Server Protocol for LaTeX"
 url="https://github.com/latex-lsp/texlab"
 # limited by rust/cargo
 # armhf - fails to build
 arch="x86_64 armv7 aarch64 x86 ppc64le"
 license="GPL-3.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/latex-lsp/texlab/archive/refs/tags/v$pkgver/texlab-v$pkgver.tar.gz"
 
 # tests OOM on 32-bit
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/topgrade/APKBUILD b/testing/topgrade/APKBUILD
index 623e6ade23d8579a1891226444bdfe0a52973b94..19bbfae53af836d12666db3b641feda78ebbafdc 100644
--- a/testing/topgrade/APKBUILD
+++ b/testing/topgrade/APKBUILD
@@ -3,12 +3,12 @@
 # Maintainer: Sean McAvoy <seanmcavoy@gmail.com>
 pkgname=topgrade
 pkgver=11.0.2
-pkgrel=0
+pkgrel=1
 pkgdesc="run upgrades of packages in OS and other package managers"
 url="https://github.com/topgrade-rs/topgrade"
 arch="all !s390x !riscv64"
 license="GPL-3.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 subpackages="
 	$pkgname-bash-completion
 	$pkgname-fish-completion
@@ -24,7 +24,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 
 	target/release/topgrade --gen-completion bash > topgrade.bash
 	target/release/topgrade --gen-completion fish > topgrade.fish
diff --git a/testing/ttyper/APKBUILD b/testing/ttyper/APKBUILD
index 592a3bcfda150d389e6b3dd72c388590d5b4c3c3..6fe1b896441f36a4536fe8287bbe137103e78e07 100644
--- a/testing/ttyper/APKBUILD
+++ b/testing/ttyper/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Cowington Post <cowingtonpost@gmail.com>
 pkgname=ttyper
 pkgver=1.2.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Terminal-based typing test"
 url="https://github.com/max-niederman/ttyper/"
 arch="all"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/max-niederman/ttyper/archive/refs/tags/v$pkgver/ttyper-$pkgver.tar.gz"
 
 case "$CARCH" in
@@ -20,7 +20,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/twiggy/APKBUILD b/testing/twiggy/APKBUILD
index 0ff558ce9671f1fb06c689810dfd7eadfe14b3d5..aed853fc18d92f969601ad94e9b11a56b4fe8387 100644
--- a/testing/twiggy/APKBUILD
+++ b/testing/twiggy/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: TBK <alpine@jjtc.eu>
 pkgname=twiggy
 pkgver=0.6.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Twiggy a code size profiler for Wasm"
 url="https://github.com/rustwasm/twiggy"
 arch="all !s390x !riscv64" # Limited by cargo
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/rustwasm/twiggy/archive/$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/typst-lsp/APKBUILD b/testing/typst-lsp/APKBUILD
index d560c4fa23222b87919b8f636af1e23e0394ace4..64523e1f7cbb4404564ef754e6c632d19a2fd94b 100644
--- a/testing/typst-lsp/APKBUILD
+++ b/testing/typst-lsp/APKBUILD
@@ -1,14 +1,14 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=typst-lsp
 pkgver=0.5.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Language server for typst"
 url="https://github.com/nvarner/typst-lsp"
 # typst, rust-analyzer
 arch="aarch64 ppc64le x86_64"
 license="MIT"
 depends="rust-analyzer"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/nvarner/typst-lsp/archive/refs/tags/v$pkgver.tar.gz"
 options="net !check" # no tests
 
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/typst/APKBUILD b/testing/typst/APKBUILD
index 3ed74bfced79597e264c73795624a1eea41077df..6460e45dce0f628ef9582e213c55a95764af207d 100644
--- a/testing/typst/APKBUILD
+++ b/testing/typst/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=typst
 pkgver=0.4.0
-pkgrel=0
+pkgrel=1
 pkgdesc="New markup-based typesetting system that is powerful and easy to learn"
 url="https://github.com/typst/typst"
 # s390x: 90% of tests fail due to endianness
@@ -11,6 +11,7 @@ arch="all !s390x !ppc64le !riscv64 !armhf"
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	"
 subpackages="
 	$pkgname-doc
@@ -47,7 +48,7 @@ build() {
 	# so, just keep them vendored-in for now. when fixed, add
 	# --no-default-features
 	GEN_ARTIFACTS="./gen" \
-		cargo build --release --frozen -p typst-cli
+		cargo auditable build --release --frozen -p typst-cli
 }
 
 check() {
diff --git a/testing/udpt/APKBUILD b/testing/udpt/APKBUILD
index beb6f1c4f20e7ca1376ffb4b418171342ab8add8..3ed8319e1c6c1aac42e636d5fa154264102ee201 100644
--- a/testing/udpt/APKBUILD
+++ b/testing/udpt/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Thomas Kienlen <kommander@laposte.net>
 pkgname=udpt
 pkgver=3.1.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Lightweight UDP torrent tracker"
 url="https://github.com/naim94a/udpt"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust/cargo
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 pkgusers="udpt"
 pkggroups="udpt"
 install="udpt.pre-install"
@@ -21,7 +21,7 @@ builddir="$srcdir/udpt-udpt-$pkgver"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/unmake/APKBUILD b/testing/unmake/APKBUILD
index e3a4d2b244db32014f0b8da3308ac23370efd6f1..c70d6ee998a0e1b21399be80ed4d472e2eb3b9f3 100644
--- a/testing/unmake/APKBUILD
+++ b/testing/unmake/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: psykose <alice@ayaya.dev>
 pkgname=unmake
 pkgver=0.0.12
-pkgrel=0
+pkgrel=1
 pkgdesc="POSIX Makefile linter"
 url="https://github.com/mcandre/unmake"
 arch="all"
 license="BSD-2-Clause"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/mcandre/unmake/archive/refs/tags/v$pkgver.tar.gz"
 # cargo fetch
 options="net"
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/uutils-coreutils/APKBUILD b/testing/uutils-coreutils/APKBUILD
index 06587b8664a0c5cdb1bb2e6fee9a4f7cac65ff22..f5cc96f42ec237945032923dd4b2077c1cf7be41 100644
--- a/testing/uutils-coreutils/APKBUILD
+++ b/testing/uutils-coreutils/APKBUILD
@@ -2,14 +2,14 @@
 pkgname=uutils-coreutils
 _pkgname=coreutils
 pkgver=0.0.18
-pkgrel=0
+pkgrel=1
 pkgdesc="coreutils rewritten in Rust"
 # s390x: some endianness failure
 # riscv64: rust broken
 arch="all !s390x !riscv64"
 url="https://github.com/uutils/coreutils"
 license="MIT"
-makedepends="cargo help2man oniguruma-dev"
+makedepends="cargo help2man oniguruma-dev cargo-auditable"
 checkdepends="coreutils" # test_ls.rs incompatible with busybox truncate
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://github.com/uutils/coreutils/archive/$pkgver.tar.gz"
@@ -33,7 +33,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 
 	mkdir bin
 	cp target/release/"$_pkgname" bin/uutils
diff --git a/testing/vaultwarden/APKBUILD b/testing/vaultwarden/APKBUILD
index 81a1aabd806d1e1ae9c1de2cc577562e89fbf186..f236e8ba2f9c31fbe67ea5e611289be814d26638 100644
--- a/testing/vaultwarden/APKBUILD
+++ b/testing/vaultwarden/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Chris Kruger <alpine@krugerheavyindustries.com>
 pkgname=vaultwarden
 pkgver=1.28.1
-pkgrel=0
+pkgrel=1
 pkgdesc="bitwarden alternative backend"
 _bw_web_ver=2023.3.0
 provides="bitwarden_rs=$pkgver-r$pkgrel"
@@ -12,6 +12,7 @@ arch="all !ppc64le !s390x !riscv64" # ring crate has platform specific asm - no
 license="AGPL-3.0-only"
 makedepends="
 	cargo
+	cargo-auditable
 	libpq-dev
 	mariadb-dev
 	mimalloc2-dev
@@ -45,7 +46,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --features sqlite,postgresql,mysql,enable_mimalloc --frozen
+	cargo auditable build --release --features sqlite,postgresql,mysql,enable_mimalloc --frozen
 }
 
 check() {
diff --git a/testing/vector/APKBUILD b/testing/vector/APKBUILD
index a37a9cedb8dccf5ff5f161f8aa7e58d4bf1007cb..6ccd07d5e7b35d0c98d33fdaa78b9e28925e806f 100644
--- a/testing/vector/APKBUILD
+++ b/testing/vector/APKBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=vector
 pkgver=0.29.1
-pkgrel=0
+pkgrel=1
 pkgdesc="High-performance observability data pipeline"
 url="https://vector.dev/"
 # s390x, ppc64le, riscv64: blocked by ring crate
@@ -10,6 +10,7 @@ arch="all !s390x !ppc64le !riscv64 !x86 !armhf !armv7"
 license="MPL-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	cmake
 	librdkafka-dev
 	openssl-dev
@@ -35,12 +36,12 @@ export OPENSSL_NO_VENDOR=1
 prepare() {
 	default_prepare
 
-	# "cargo build" still tries to pull dependencies for other platforms
+	# "cargo auditable build" still tries to pull dependencies for other platforms
 	cargo fetch --locked
 }
 
 build() {
-	cargo build \
+	cargo auditable build \
 		--release \
 		--frozen \
 		--no-default-features \
diff --git a/testing/verco/APKBUILD b/testing/verco/APKBUILD
index 04bb1cbac01b79a03d5beb0b1a221513edc0eb15..18bce062a428ec480760a5a65a0fae286a01cd65 100644
--- a/testing/verco/APKBUILD
+++ b/testing/verco/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: omni <omni+alpine@hack.org>
 pkgname=verco
 pkgver=6.12.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Simple Git/Mercurial/PlasticSCM tui client based on keyboard shortcuts"
 arch="all !s390x !riscv64" # limited by cargo
 url="https://github.com/vamolessa/verco"
 license="GPL-3.0-or-later"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 options="!check" # No tests
 source="$pkgname-$pkgver.tar.gz::https://github.com/vamolessa/verco/archive/refs/tags/v$pkgver.tar.gz"
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/vivid/APKBUILD b/testing/vivid/APKBUILD
index 5014219364e2b80fba340af90a78574d54e08e3c..d3083ab10c40ed7bcc1721e538167cbb0817153f 100644
--- a/testing/vivid/APKBUILD
+++ b/testing/vivid/APKBUILD
@@ -1,12 +1,12 @@
 # Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
 pkgname=vivid
 pkgver=0.9.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Themeable LS_COLORS generator with a rich filetype database"
 url="https://github.com/sharkdp/vivid"
 arch="all"
 license="Apache-2.0 AND MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/sharkdp/vivid/archive/refs/tags/v$pkgver.tar.gz"
 
 export CARGO_PROFILE_RELEASE_OPT_LEVEL="z"
@@ -23,7 +23,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/vocage/APKBUILD b/testing/vocage/APKBUILD
index dda37379d801c3935fba0b2391c636be6b1f7d68..2d4fb44a60ed43bbfea84ff53b6f3d565a6d856c 100644
--- a/testing/vocage/APKBUILD
+++ b/testing/vocage/APKBUILD
@@ -1,18 +1,18 @@
 # Maintainer: Krystian Chachuła <krystian@krystianch.com>
 pkgname=vocage
 pkgver=1.1.0
-pkgrel=2
+pkgrel=3
 pkgdesc="Minimalistic terminal-based vocabulary-learning tool"
 url="https://github.com/proycon/vocage"
 arch="all !s390x !riscv64"
 license="GPL-3.0-or-later"
-makedepends="rust cargo"
+makedepends="rust cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/proycon/vocage/archive/refs/tags/v$pkgver.tar.gz"
 options="!check" # No test suite / unit tests
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 package() {
diff --git a/testing/wasmtime/APKBUILD b/testing/wasmtime/APKBUILD
index a23004a22b170e57a567cbf7b4022fbe871bba4e..7fac2b9c0927c1754844df92cbd8e7dc9de2b8f3 100644
--- a/testing/wasmtime/APKBUILD
+++ b/testing/wasmtime/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Patrycja Rosa <alpine@ptrcnull.me>
 pkgname=wasmtime
 pkgver=9.0.1
-pkgrel=0
+pkgrel=1
 pkgdesc="Fast and secure runtime for WebAssembly"
 url="https://wasmtime.dev/"
 # others unsupported
 arch="aarch64 x86_64"
 license="Apache-2.0"
 depends_dev="libwasmtime=$pkgver-r$pkgrel"
-makedepends="cargo rust-wasm zstd-dev"
+makedepends="cargo rust-wasm zstd-dev cargo-auditable"
 subpackages="libwasmtime $pkgname-dev"
 source="https://github.com/bytecodealliance/wasmtime/releases/download/v$pkgver/wasmtime-v$pkgver-src.tar.gz
 	system-zstd.patch
@@ -42,8 +42,8 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
-	cargo build --frozen --release --manifest-path crates/c-api/Cargo.toml
+	cargo auditable build --frozen --release
+	cargo auditable build --frozen --release --manifest-path crates/c-api/Cargo.toml
 }
 
 check() {
diff --git a/testing/watchexec/APKBUILD b/testing/watchexec/APKBUILD
index 4845d43e1b48fb26d9ad3379d52343f2e4ffdf63..721e74c321366c28bb881188240dafa17947b6ff 100644
--- a/testing/watchexec/APKBUILD
+++ b/testing/watchexec/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer:
 pkgname=watchexec
 pkgver=1.22.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Executes commands in response to file modifications"
 url="https://github.com/watchexec/watchexec"
 # arm: fails to build
 # error: Undefined temporary symbol .LBB33_2
 arch="x86_64 x86 aarch64 ppc64le" # limited by rust/cargo
 license="Apache-2.0"
-makedepends="cargo dbus-dev"
+makedepends="cargo dbus-dev cargo-auditable"
 checkdepends="bash"
 subpackages="$pkgname-doc
 	$pkgname-zsh-completion
@@ -33,7 +33,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/waylevel/APKBUILD b/testing/waylevel/APKBUILD
index a097233d4380fbe9565b05b3e7d09589b7e25fa2..3ff571f9eed3b53e3bd6aecba70f3077b06c5e32 100644
--- a/testing/waylevel/APKBUILD
+++ b/testing/waylevel/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=waylevel
 pkgver=1.0.0
-pkgrel=0
+pkgrel=1
 pkgdesc="A tool to print Wayland toplevels status and info"
 url="https://git.sr.ht/~shinyzenith/waylevel"
 # s390x: nix crate fails to build
@@ -12,6 +12,7 @@ license="BSD-2-Clause"
 depends="wayland-libs-client"
 makedepends="
 	cargo
+	cargo-auditable
 	wayland-dev
 	"
 source="$pkgname-$pkgver.tar.gz::https://git.sr.ht/~shinyzenith/waylevel/archive/$pkgver.tar.gz"
@@ -25,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/weggli/APKBUILD b/testing/weggli/APKBUILD
index b31ca046878464ca75260b0c8ef835957959a466..6337128a56a4d3a6e9376ec3f32a010cd6f599c1 100644
--- a/testing/weggli/APKBUILD
+++ b/testing/weggli/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=weggli
 pkgver=0.2.4
-pkgrel=0
+pkgrel=1
 pkgdesc="Semantic search tool for C and C++ codebases"
 url="https://github.com/googleprojectzero/weggli"
 license="Apache-2.0"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="https://github.com/googleprojectzero/weggli/archive/v$pkgver/weggli-$pkgver.tar.gz"
 
 
@@ -18,7 +18,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {
diff --git a/testing/wk-adblock/APKBUILD b/testing/wk-adblock/APKBUILD
index 7b9fe9d1c4be5007ed4ab6938e1f267fec779a33..1d2f723bf3fc348d89060317255c13f566cee9e4 100644
--- a/testing/wk-adblock/APKBUILD
+++ b/testing/wk-adblock/APKBUILD
@@ -2,13 +2,13 @@
 pkgname=wk-adblock
 pkgver=0.0.4
 _commit=665ffb4126ae924e345d04adcf6242066216a508
-pkgrel=4
+pkgrel=5
 pkgdesc="Simple ad-blocker for Webkit2 Webview"
 options="!check" # No testsuite
 url="https://github.com/DavidVentura/webextension-adblocker/"
 arch="x86_64 armv7 armhf aarch64 x86 ppc64le" # limited by rust
 license="GPL-3.0-or-later"
-makedepends="cargo clang-dev glib-dev llvm-dev webkit2gtk-4.1-dev"
+makedepends="cargo clang-dev glib-dev llvm-dev webkit2gtk-4.1-dev cargo-auditable"
 subpackages="$pkgname-doc"
 source="$pkgname-$pkgver.tar.gz::https://codeload.github.com/DavidVentura/webextension-adblocker/tar.gz/$_commit
 	cargo-lock.patch
@@ -28,7 +28,7 @@ prepare() {
 
 build() {
 	cd wk-we-adblock
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 package() {
diff --git a/testing/wpaperd/APKBUILD b/testing/wpaperd/APKBUILD
index c5bf5126cd365a8b182a4b3ec91ade278a44e90d..29daf41beac80cb35ec6dd9628aaca6808056d00 100644
--- a/testing/wpaperd/APKBUILD
+++ b/testing/wpaperd/APKBUILD
@@ -2,12 +2,12 @@
 # Maintainer: Michał Polański <michal@polanski.me>
 pkgname=wpaperd
 pkgver=0.3.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Wallpaper daemon for Wayland"
 url="https://github.com/danyspin97/wpaperd"
 license="GPL-3.0-or-later"
 arch="all !s390x !riscv64" # blocked by rust/cargo
-makedepends="cargo libxkbcommon-dev scdoc"
+makedepends="cargo libxkbcommon-dev scdoc cargo-auditable"
 subpackages="
 	$pkgname-doc
 	$pkgname-bash-completion
@@ -27,7 +27,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 
 	scdoc <man/wpaperd-output.5.scd >man/wpaperd-output.5
 }
diff --git a/testing/xendmail/APKBUILD b/testing/xendmail/APKBUILD
index 556150069de2bac9de2dfefb4ec698fee3ae0812..edcee1084ebba17b7d6c8f35dc8a63fcd54dee16 100644
--- a/testing/xendmail/APKBUILD
+++ b/testing/xendmail/APKBUILD
@@ -1,13 +1,13 @@
 # Maintainer: Hugo Osvaldo Barrera <hugo@whynothugo.nl>
 pkgname=xendmail
 pkgver=0.1.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Like sendmail, for users"
 url="https://git.sr.ht/~whynothugo/xendmail"
 # rust-ring
 arch="all !s390x !ppc64le !riscv64"
 license="Apache-2.0"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="xendmail-$pkgver.tar.gz::https://git.sr.ht/~whynothugo/xendmail/archive/v$pkgver.tar.gz"
 builddir="$srcdir/$pkgname-v$pkgver"
 options="net" # fetch dependencies
@@ -26,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --release --frozen
+	cargo auditable build --release --frozen
 }
 
 check() {
diff --git a/testing/xplr/APKBUILD b/testing/xplr/APKBUILD
index b3f91425df769cd764596bbecd4a20c10eeda5ef..d14c47091628bfe4ca610ec1e4b82f5d15de0e8b 100644
--- a/testing/xplr/APKBUILD
+++ b/testing/xplr/APKBUILD
@@ -2,14 +2,14 @@
 # Maintainer: Jakub Panek <me@panekj.dev>
 pkgname=xplr
 pkgver=0.21.1
-pkgrel=0
+pkgrel=1
 pkgdesc="A hackable, minimal, fast TUI file explorer"
 url="https://xplr.dev"
 # s390x, riscv64: rust
 # ppc64le: luajit
 arch="all !ppc64le !s390x !riscv64"
 license="MIT"
-makedepends="cargo luajit-dev"
+makedepends="cargo luajit-dev cargo-auditable"
 options="net"
 source="
 	https://github.com/sayanarijit/xplr/archive/refs/tags/v$pkgver/xplr-$pkgver.tar.gz
@@ -24,11 +24,11 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --offline --release
+	cargo auditable build --frozen --offline --release
 }
 
 check() {
-	cargo build --frozen --offline
+	cargo auditable build --frozen --offline
 	# cargo test doesn't build target/debug/xplr binary
 	cargo test --frozen
 }
diff --git a/testing/xremap-sway/APKBUILD b/testing/xremap-sway/APKBUILD
index afa637ca9bfd5f1f98c86456bfe875a075e287e2..85ec616854719fe826b052136dfb63b8e9f9731d 100644
--- a/testing/xremap-sway/APKBUILD
+++ b/testing/xremap-sway/APKBUILD
@@ -2,13 +2,13 @@
 # Maintainer: Coco Liliace <chloe@liliace.dev>
 pkgname=xremap-sway
 pkgver=0.8.5
-pkgrel=0
+pkgrel=1
 pkgdesc="Key remapper for X11 and Wayland"
 url="https://github.com/k0kubun/xremap"
 # nix
 arch="all !s390x !riscv64"
 license="MIT"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/k0kubun/xremap/archive/v$pkgver.tar.gz"
 builddir="$srcdir/xremap-$pkgver"
 
@@ -19,7 +19,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release --features sway
+	cargo auditable build --frozen --release --features sway
 }
 
 check() {
diff --git a/testing/youki/APKBUILD b/testing/youki/APKBUILD
index 6c41908c80df59fc448d075691fba9c92c402fb8..9f7f9b533c72b3bc713857989754a5461c0bdc2d 100644
--- a/testing/youki/APKBUILD
+++ b/testing/youki/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=youki
 pkgver=0.0.4
-pkgrel=0
+pkgrel=1
 pkgdesc="A container runtime written in Rust"
 url="https://github.com/containers/youki"
 # ppc64le: syscalls crate inline asm is unstable for ppc64le
@@ -12,6 +12,7 @@ arch="all !ppc64le !s390x !riscv64"
 license="Apache-2.0"
 makedepends="
 	cargo
+	cargo-auditable
 	dbus-dev
 	libgit2-dev
 	libseccomp-dev
@@ -34,7 +35,7 @@ prepare() {
 }
 
 build() {
-	cargo build $_cargo_opts --release
+	cargo auditable build $_cargo_opts --release
 }
 
 check() {
diff --git a/testing/zkgroup/APKBUILD b/testing/zkgroup/APKBUILD
index d195ac94f0ce76485df3e4a14b403c80880a102a..8071f771c7824c48f78da362a64824530cf1b23b 100644
--- a/testing/zkgroup/APKBUILD
+++ b/testing/zkgroup/APKBUILD
@@ -2,17 +2,17 @@
 # Maintainer: Siva Mahadevan <me@svmhdvn.name>
 pkgname=zkgroup
 pkgver=0.9.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Library for the Signal Private Group System"
 url="https://github.com/signalapp/zkgroup"
 arch="all !s390x !ppc64le !riscv64" # limited by cargo
 license="GPL-3.0-only"
-makedepends="cargo"
+makedepends="cargo cargo-auditable"
 source="$pkgname-$pkgver.tar.gz::https://github.com/signalapp/zkgroup/archive/v$pkgver.tar.gz"
 
 
 build() {
-	cargo build --release --locked
+	cargo auditable build --release --locked
 }
 
 check() {
diff --git a/testing/zsh-histdb-skim/APKBUILD b/testing/zsh-histdb-skim/APKBUILD
index 3011c50334e43ec058319a342743f21bfd9fcb61..69102221ccd4ca4da0ba3ef27d1e6bdd28abe9cc 100644
--- a/testing/zsh-histdb-skim/APKBUILD
+++ b/testing/zsh-histdb-skim/APKBUILD
@@ -2,7 +2,7 @@
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=zsh-histdb-skim
 pkgver=0.8.5
-pkgrel=0
+pkgrel=1
 pkgdesc="A zsh histdb browser using skim"
 url="https://github.com/m42e/zsh-histdb-skim"
 # riscv64: textrels
@@ -12,6 +12,7 @@ license="MIT"
 depends="zsh-histdb"
 makedepends="
 	cargo
+	cargo-auditable
 	sqlite-dev
 	"
 source="https://github.com/m42e/zsh-histdb-skim/archive/v$pkgver/zsh-histdb-skim-$pkgver.tar.gz
@@ -25,7 +26,7 @@ prepare() {
 }
 
 build() {
-	cargo build --frozen --release
+	cargo auditable build --frozen --release
 }
 
 check() {