Repository navigation
Commit 2088e34
committed
chore(supply-chain): import canonical audit peers and regenerate exemptions
The criterion dev-dep added in the preceding test: commit brought in
~30 transitive crates that weren't covered by cargo-vet, causing the
non-required Cargo Vet (Supply Chain) CI check to fail.
Imported 6 canonical public audit sources (google, mozilla,
bytecode-alliance, isrg, zcash, fermyon), trusted the publishers
cargo-vet suggested as already cross-trusted by those orgs
(sunfishcode, BurntSushi, cuviper, alexcrichton, starkat99), then
regenerated exemptions for the residual safe-to-run gaps (criterion's
bench-time-only transitive tree: plotters, web-sys diff, criterion-plot,
etc.).
Net effect: config.toml shrinks by ~250 lines (existing hand-managed
exemptions now satisfied by audits in the imported peers); imports.lock
gains the locked audit references. cargo vet now reports: 83 fully
audited, 5 partially audited, 98 exempted.
Note: Phase 2 of the audit-driven cleanup deletes the supply-chain/
machinery entirely (per the catchphrase-agent recommendation —
cargo-audit + cargo-deny already cover CVEs and licenses). This commit
just unblocks the failing check on PR #36 so it ships clean.1 parent 48eb9e4 commit 2088e34
3 files changed
Lines changed: 1985 additions & 252 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + | |
| 26 | + | |
| 27 | + | |
| 28 | + | |
| 29 | + | |
| 30 | + | |
| 31 | + | |
| 32 | + | |
| 33 | + | |
| 34 | + | |
| 35 | + | |
| 36 | + | |
| 37 | + | |
| 38 | + | |
| 39 | + | |
| 40 | + | |
| 41 | + | |
| 42 | + | |
| 43 | + | |
| 44 | + | |
| 45 | + | |
| 46 | + | |
| 47 | + | |
| 48 | + | |
| 49 | + | |
| 50 | + | |
| 51 | + | |
| 52 | + | |
| 53 | + | |
| 54 | + | |
| 55 | + | |
| 56 | + | |
| 57 | + | |
| 58 | + | |
0 commit comments