supply-chain: Add cargo-vet setup
This commit is contained in:
Sophie Herold
parent
a9a5b9c874
commit
78e47f6e87
3 changed files with 3282 additions and 0 deletions
305
supply-chain/audits.toml
Normal file
305
supply-chain/audits.toml
Normal file
|
|
@ -0,0 +1,305 @@
|
|||
|
||||
# cargo-vet audits file
|
||||
|
||||
[[audits.cfg_aliases]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.1.1 -> 0.2.1"
|
||||
|
||||
[[audits.miniz_oxide]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.7.2 -> 0.7.4"
|
||||
|
||||
[[audits.ppv-lite86]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.2.17 -> 0.2.18"
|
||||
|
||||
[[audits.strum]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.25.0 -> 0.26.3"
|
||||
|
||||
[[audits.strum_macros]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.25.3 -> 0.26.4"
|
||||
|
||||
[[audits.url]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "2.5.1 -> 2.5.2"
|
||||
|
||||
[[audits.utf8parse]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.2.1 -> 0.2.2"
|
||||
|
||||
[[audits.version-compare]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.1.1 -> 0.2.0"
|
||||
|
||||
[[audits.version_check]]
|
||||
who = "Sophie Herold <sophie@hemio.de>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.9.4 -> 0.9.5"
|
||||
|
||||
[[trusted.aho-corasick]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2019-03-28"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.anstream]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2023-03-16"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.anstyle]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2022-05-18"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.anstyle-parse]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2023-03-08"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.anstyle-query]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2023-04-13"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.anstyle-wincon]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2023-03-08"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.anyhow]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-10-05"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.async-process]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 33035 # Taiki Endo (taiki-e)
|
||||
start = "2021-04-24"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.async-signal]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 33035 # Taiki Endo (taiki-e)
|
||||
start = "2023-09-28"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.async-trait]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-07-23"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.backtrace]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 2915 # Amanieu d'Antras (Amanieu)
|
||||
start = "2023-06-29"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.byteorder]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2019-06-09"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.colorchoice]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2023-04-13"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.crossbeam-utils]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 33035 # Taiki Endo (taiki-e)
|
||||
start = "2020-10-12"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.env_filter]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2024-01-19"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.env_logger]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2022-11-24"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.indexmap]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 539 # Josh Stone (cuviper)
|
||||
start = "2020-01-15"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.is_terminal_polyfill]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2024-05-02"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.jobserver]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 1
|
||||
start = "2019-03-15"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.kamadak-exif]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 5577 # KAMADA Ken'ichi (kamadak)
|
||||
start = "2019-12-22"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.linux-raw-sys]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6825 # Dan Gohman (sunfishcode)
|
||||
start = "2021-06-12"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.memchr]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2019-07-07"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.mutate_once]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 5577 # KAMADA Ken'ichi (kamadak)
|
||||
start = "2019-07-25"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.paste]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-03-19"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.regex]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2019-02-27"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.regex-automata]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2019-02-25"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.regex-syntax]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2019-03-30"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.ryu]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-05-02"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.same-file]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2019-07-16"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.serde_json]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-02-28"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.serde_repr]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-04-26"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.serde_spanned]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2023-01-20"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.smallvec]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 2017 # Matt Brubeck (mbrubeck)
|
||||
start = "2019-10-28"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.syn]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-03-01"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.target-lexicon]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 696 # Nick Fitzgerald (fitzgen)
|
||||
start = "2024-07-30"
|
||||
end = "2025-08-13"
|
||||
|
||||
[[trusted.thiserror]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-10-09"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.thiserror-impl]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 3618 # David Tolnay (dtolnay)
|
||||
start = "2019-10-09"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.toml]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2022-12-14"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.toml_datetime]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2022-10-21"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.toml_edit]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2021-09-13"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.walkdir]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2019-06-09"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.winapi-util]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 189 # Andrew Gallant (BurntSushi)
|
||||
start = "2020-01-11"
|
||||
end = "2025-07-25"
|
||||
|
||||
[[trusted.winnow]]
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 6743 # Ed Page (epage)
|
||||
start = "2023-02-22"
|
||||
end = "2025-07-25"
|
||||
157
supply-chain/config.toml
Normal file
157
supply-chain/config.toml
Normal file
|
|
@ -0,0 +1,157 @@
|
|||
|
||||
# cargo-vet config file
|
||||
|
||||
[cargo-vet]
|
||||
version = "0.9"
|
||||
|
||||
[imports.bytecode-alliance]
|
||||
url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
|
||||
|
||||
[imports.embark-studios]
|
||||
url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
|
||||
|
||||
[imports.gnome]
|
||||
url = "https://gitlab.gnome.org/sophie-h/rust-supply-chain/-/raw/main/gnome-created/supply-chain/audits.toml"
|
||||
|
||||
[imports.gnome-trusted]
|
||||
url = "https://gitlab.gnome.org/sophie-h/rust-supply-chain/-/raw/main/gnome-trusted/supply-chain/audits.toml"
|
||||
|
||||
[imports.google]
|
||||
url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
|
||||
|
||||
[imports.isrg]
|
||||
url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml"
|
||||
|
||||
[imports.mozilla]
|
||||
url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
|
||||
|
||||
[imports.zcash]
|
||||
url = "https://raw.githubusercontent.com/zcash/rust-ecosystem/main/supply-chain/audits.toml"
|
||||
|
||||
[[exemptions.arc-swap]]
|
||||
version = "1.7.1"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.dlib]]
|
||||
version = "0.5.2"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.dunce]]
|
||||
version = "1.0.4"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.enumflags2]]
|
||||
version = "0.7.10"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.enumflags2_derive]]
|
||||
version = "0.7.10"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.field-offset]]
|
||||
version = "0.3.6"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.futures-timer]]
|
||||
version = "3.0.3"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.generic-array]]
|
||||
version = "0.14.6"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.getrandom]]
|
||||
version = "0.2.2"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.gettext-rs]]
|
||||
version = "0.7.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.gettext-sys]]
|
||||
version = "0.21.3"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.humantime]]
|
||||
version = "2.1.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.lcms2]]
|
||||
version = "6.1.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.lcms2-sys]]
|
||||
version = "4.0.5"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.libloading]]
|
||||
version = "0.8.5"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.libseccomp]]
|
||||
version = "0.3.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.libseccomp-sys]]
|
||||
version = "0.2.1"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.locale_config]]
|
||||
version = "0.3.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.memmap2]]
|
||||
version = "0.5.4"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.memoffset]]
|
||||
version = "0.9.1"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.nix]]
|
||||
version = "0.29.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.once_cell]]
|
||||
version = "1.12.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.ordered-stream]]
|
||||
version = "0.2.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.ppv-lite86]]
|
||||
version = "0.2.16"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.proc-macro-crate]]
|
||||
version = "3.1.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.quick-xml]]
|
||||
version = "0.36.1"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.rand]]
|
||||
version = "0.8.5"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.rmp]]
|
||||
version = "0.8.14"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.rmp-serde]]
|
||||
version = "1.3.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.temp-dir]]
|
||||
version = "0.1.13"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.typenum]]
|
||||
version = "1.15.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.yeslogic-fontconfig-sys]]
|
||||
version = "6.0.0"
|
||||
criteria = "safe-to-deploy"
|
||||
2820
supply-chain/imports.lock
Normal file
2820
supply-chain/imports.lock
Normal file
File diff suppressed because it is too large
Load diff
Loading…
Add table
Add a link
Reference in a new issue