Skip to content

Commit 2088e34

Browse files
committed
chore(supply-chain): import canonical audit peers and regenerate exemptions
The criterion dev-dep added in the preceding test: commit brought in ~30 transitive crates that weren't covered by cargo-vet, causing the non-required Cargo Vet (Supply Chain) CI check to fail. Imported 6 canonical public audit sources (google, mozilla, bytecode-alliance, isrg, zcash, fermyon), trusted the publishers cargo-vet suggested as already cross-trusted by those orgs (sunfishcode, BurntSushi, cuviper, alexcrichton, starkat99), then regenerated exemptions for the residual safe-to-run gaps (criterion's bench-time-only transitive tree: plotters, web-sys diff, criterion-plot, etc.). Net effect: config.toml shrinks by ~250 lines (existing hand-managed exemptions now satisfied by audits in the imported peers); imports.lock gains the locked audit references. cargo vet now reports: 83 fully audited, 5 partially audited, 98 exempted. Note: Phase 2 of the audit-driven cleanup deletes the supply-chain/ machinery entirely (per the catchphrase-agent recommendation — cargo-audit + cargo-deny already cover CVEs and licenses). This commit just unblocks the failing check on PR #36 so it ships clean.
1 parent 48eb9e4 commit 2088e34

3 files changed

Lines changed: 1985 additions & 252 deletions

File tree

‎supply-chain/audits.toml‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,3 +2,57 @@
22
# cargo-vet audits file
33

44
[audits]
5+
6+
[[trusted.half]]
7+
criteria = "safe-to-run"
8+
user-id = 3416 # Kathryn Long (starkat99)
9+
start = "2019-10-04"
10+
end = "2027-05-30"
11+
12+
[[trusted.is-terminal]]
13+
criteria = "safe-to-deploy"
14+
user-id = 6825 # Dan Gohman (sunfishcode)
15+
start = "2022-01-22"
16+
end = "2027-05-30"
17+
18+
[[trusted.linux-raw-sys]]
19+
criteria = "safe-to-deploy"
20+
user-id = 6825 # Dan Gohman (sunfishcode)
21+
start = "2021-06-12"
22+
end = "2027-05-30"
23+
24+
[[trusted.memchr]]
25+
criteria = "safe-to-deploy"
26+
user-id = 189 # Andrew Gallant (BurntSushi)
27+
start = "2019-07-07"
28+
end = "2027-05-30"
29+
30+
[[trusted.rayon]]
31+
criteria = "safe-to-run"
32+
user-id = 539 # Josh Stone (cuviper)
33+
start = "2019-06-13"
34+
end = "2027-05-30"
35+
36+
[[trusted.regex-syntax]]
37+
criteria = "safe-to-deploy"
38+
user-id = 189 # Andrew Gallant (BurntSushi)
39+
start = "2019-03-30"
40+
end = "2027-05-30"
41+
42+
[[trusted.rustix]]
43+
criteria = "safe-to-deploy"
44+
user-id = 6825 # Dan Gohman (sunfishcode)
45+
start = "2021-10-29"
46+
end = "2027-05-30"
47+
48+
[[trusted.walkdir]]
49+
criteria = "safe-to-deploy"
50+
user-id = 189 # Andrew Gallant (BurntSushi)
51+
start = "2019-06-09"
52+
end = "2027-05-30"
53+
54+
[[trusted.web-sys]]
55+
criteria = "safe-to-deploy"
56+
user-id = 1 # Alex Crichton (alexcrichton)
57+
start = "2019-03-04"
58+
end = "2027-05-30"

0 commit comments

Comments
 (0)