[Rust] Including dependencies in the analysis

[drank40]

Hi, is there any way to include cargo dependencies within the generated dbs? Right now im generating it like this

codeql database create rust-db \
  --language=rust \
  --source-root . \
  --command "cargo build --all-targets --all-features" \
  --extractor-option rust.cargo_all_targets=true \
  --extractor-option rust.extract_dependencies_as_source=true \
  --overwrite

But my queries still dont seem to go down into my dependecies

[mbg]

Hi @drank40 👋🏻

Do you have any custom queries that you think should work, but don't? Or do you expect some of the default queries to find results that they aren't?

Have you tried querying the database for information about the dependencies?

[drank40]

Hi, I've done a bit more digging, and it seems like if I vendor my dependencies with cargo vendor , they show up in the analysis with basic broad queries.