Skip to content

Commit 5ec0098

Browse files
billfbillf
committed
security(cargo): use cargo vet for dependencies
1 parent d6c4a6e commit 5ec0098

File tree

4 files changed

+2212
-0
lines changed

4 files changed

+2212
-0
lines changed

‎devenv.nix‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
{
99
packages = with pkgs; [
1010
cargo-nextest
11+
cargo-vet
1112
cargo-watch
1213
git
1314
jq

‎supply-chain/audits.toml‎

Lines changed: 256 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,256 @@
1+
2+
# cargo-vet audits file
3+
4+
[audits]
5+
6+
[[trusted.anyhow]]
7+
criteria = "safe-to-deploy"
8+
user-id = 3618 # David Tolnay (dtolnay)
9+
start = "2019-10-05"
10+
end = "2026-06-11"
11+
12+
[[trusted.async-trait]]
13+
criteria = "safe-to-deploy"
14+
user-id = 3618 # David Tolnay (dtolnay)
15+
start = "2019-07-23"
16+
end = "2026-06-11"
17+
18+
[[trusted.backtrace]]
19+
criteria = "safe-to-deploy"
20+
user-id = 55123 # rust-lang-owner
21+
start = "2025-05-06"
22+
end = "2026-06-11"
23+
24+
[[trusted.bytes]]
25+
criteria = "safe-to-deploy"
26+
user-id = 6741 # Alice Ryhl (Darksonn)
27+
start = "2021-01-11"
28+
end = "2026-06-11"
29+
30+
[[trusted.cc]]
31+
criteria = "safe-to-deploy"
32+
user-id = 55123 # rust-lang-owner
33+
start = "2022-10-29"
34+
end = "2026-06-11"
35+
36+
[[trusted.cranelift-bitset]]
37+
criteria = "safe-to-deploy"
38+
user-id = 73222 # wasmtime-publish
39+
start = "2024-07-22"
40+
end = "2026-06-11"
41+
42+
[[trusted.errno]]
43+
criteria = "safe-to-deploy"
44+
user-id = 6825 # Dan Gohman (sunfishcode)
45+
start = "2023-08-29"
46+
end = "2026-06-11"
47+
48+
[[trusted.hashbrown]]
49+
criteria = "safe-to-deploy"
50+
user-id = 55123 # rust-lang-owner
51+
start = "2025-04-30"
52+
end = "2026-06-11"
53+
54+
[[trusted.indexmap]]
55+
criteria = "safe-to-deploy"
56+
user-id = 539 # Josh Stone (cuviper)
57+
start = "2020-01-15"
58+
end = "2026-06-11"
59+
60+
[[trusted.libc]]
61+
criteria = "safe-to-deploy"
62+
user-id = 55123 # rust-lang-owner
63+
start = "2024-08-15"
64+
end = "2026-06-11"
65+
66+
[[trusted.libm]]
67+
criteria = "safe-to-deploy"
68+
user-id = 55123 # rust-lang-owner
69+
start = "2024-10-26"
70+
end = "2026-06-11"
71+
72+
[[trusted.linux-raw-sys]]
73+
criteria = "safe-to-deploy"
74+
user-id = 6825 # Dan Gohman (sunfishcode)
75+
start = "2021-06-12"
76+
end = "2026-06-11"
77+
78+
[[trusted.lock_api]]
79+
criteria = "safe-to-deploy"
80+
user-id = 2915 # Amanieu d'Antras (Amanieu)
81+
start = "2019-05-04"
82+
end = "2026-06-11"
83+
84+
[[trusted.memchr]]
85+
criteria = "safe-to-deploy"
86+
user-id = 189 # Andrew Gallant (BurntSushi)
87+
start = "2019-07-07"
88+
end = "2026-06-11"
89+
90+
[[trusted.mio]]
91+
criteria = "safe-to-deploy"
92+
user-id = 6025 # Thomas de Zeeuw (Thomasdezeeuw)
93+
start = "2019-12-17"
94+
end = "2026-06-11"
95+
96+
[[trusted.parking_lot]]
97+
criteria = "safe-to-deploy"
98+
user-id = 2915 # Amanieu d'Antras (Amanieu)
99+
start = "2019-05-04"
100+
end = "2026-06-11"
101+
102+
[[trusted.parking_lot_core]]
103+
criteria = "safe-to-deploy"
104+
user-id = 2915 # Amanieu d'Antras (Amanieu)
105+
start = "2019-05-04"
106+
end = "2026-06-11"
107+
108+
[[trusted.prettyplease]]
109+
criteria = "safe-to-deploy"
110+
user-id = 3618 # David Tolnay (dtolnay)
111+
start = "2022-01-04"
112+
end = "2026-06-11"
113+
114+
[[trusted.proc-macro2]]
115+
criteria = "safe-to-deploy"
116+
user-id = 3618 # David Tolnay (dtolnay)
117+
start = "2019-04-23"
118+
end = "2026-06-11"
119+
120+
[[trusted.rustix]]
121+
criteria = "safe-to-deploy"
122+
user-id = 6825 # Dan Gohman (sunfishcode)
123+
start = "2021-10-29"
124+
end = "2026-06-11"
125+
126+
[[trusted.ryu]]
127+
criteria = "safe-to-deploy"
128+
user-id = 3618 # David Tolnay (dtolnay)
129+
start = "2019-05-02"
130+
end = "2026-06-11"
131+
132+
[[trusted.scopeguard]]
133+
criteria = "safe-to-deploy"
134+
user-id = 2915 # Amanieu d'Antras (Amanieu)
135+
start = "2020-02-16"
136+
end = "2026-06-11"
137+
138+
[[trusted.semver]]
139+
criteria = "safe-to-deploy"
140+
user-id = 3618 # David Tolnay (dtolnay)
141+
start = "2021-05-25"
142+
end = "2026-06-11"
143+
144+
[[trusted.serde_json]]
145+
criteria = "safe-to-deploy"
146+
user-id = 3618 # David Tolnay (dtolnay)
147+
start = "2019-02-28"
148+
end = "2026-06-11"
149+
150+
[[trusted.slab]]
151+
criteria = "safe-to-deploy"
152+
user-id = 6741 # Alice Ryhl (Darksonn)
153+
start = "2021-10-13"
154+
end = "2026-06-11"
155+
156+
[[trusted.smallvec]]
157+
criteria = "safe-to-deploy"
158+
user-id = 2017 # Matt Brubeck (mbrubeck)
159+
start = "2019-10-28"
160+
end = "2026-06-11"
161+
162+
[[trusted.socket2]]
163+
criteria = "safe-to-deploy"
164+
user-id = 6025 # Thomas de Zeeuw (Thomasdezeeuw)
165+
start = "2020-09-09"
166+
end = "2026-06-11"
167+
168+
[[trusted.syn]]
169+
criteria = "safe-to-deploy"
170+
user-id = 3618 # David Tolnay (dtolnay)
171+
start = "2019-03-01"
172+
end = "2026-06-11"
173+
174+
[[trusted.target-lexicon]]
175+
criteria = "safe-to-deploy"
176+
user-id = 6825 # Dan Gohman (sunfishcode)
177+
start = "2019-03-06"
178+
end = "2026-06-11"
179+
180+
[[trusted.termcolor]]
181+
criteria = "safe-to-deploy"
182+
user-id = 189 # Andrew Gallant (BurntSushi)
183+
start = "2019-06-04"
184+
end = "2026-06-11"
185+
186+
[[trusted.thiserror]]
187+
criteria = "safe-to-deploy"
188+
user-id = 3618 # David Tolnay (dtolnay)
189+
start = "2019-10-09"
190+
end = "2026-06-11"
191+
192+
[[trusted.thiserror-impl]]
193+
criteria = "safe-to-deploy"
194+
user-id = 3618 # David Tolnay (dtolnay)
195+
start = "2019-10-09"
196+
end = "2026-06-11"
197+
198+
[[trusted.tokio]]
199+
criteria = "safe-to-deploy"
200+
user-id = 6741 # Alice Ryhl (Darksonn)
201+
start = "2020-12-25"
202+
end = "2026-06-11"
203+
204+
[[trusted.tokio-macros]]
205+
criteria = "safe-to-deploy"
206+
user-id = 6741 # Alice Ryhl (Darksonn)
207+
start = "2020-10-26"
208+
end = "2026-06-11"
209+
210+
[[trusted.wac-types]]
211+
criteria = "safe-to-deploy"
212+
user-id = 73222 # wasmtime-publish
213+
start = "2024-04-16"
214+
end = "2026-06-11"
215+
216+
[[trusted.wasi]]
217+
criteria = "safe-to-deploy"
218+
user-id = 1 # Alex Crichton (alexcrichton)
219+
start = "2020-06-03"
220+
end = "2026-06-11"
221+
222+
[[trusted.wasmtime-versioned-export-macros]]
223+
criteria = "safe-to-deploy"
224+
user-id = 73222 # wasmtime-publish
225+
start = "2023-08-21"
226+
end = "2026-06-11"
227+
228+
[[trusted.winapi-util]]
229+
criteria = "safe-to-deploy"
230+
user-id = 189 # Andrew Gallant (BurntSushi)
231+
start = "2020-01-11"
232+
end = "2026-06-11"
233+
234+
[[trusted.windows-targets]]
235+
criteria = "safe-to-deploy"
236+
user-id = 64539 # Kenny Kerr (kennykerr)
237+
start = "2022-09-09"
238+
end = "2026-06-11"
239+
240+
[[trusted.windows_aarch64_gnullvm]]
241+
criteria = "safe-to-deploy"
242+
user-id = 64539 # Kenny Kerr (kennykerr)
243+
start = "2022-09-01"
244+
end = "2026-06-11"
245+
246+
[[trusted.windows_i686_gnullvm]]
247+
criteria = "safe-to-deploy"
248+
user-id = 64539 # Kenny Kerr (kennykerr)
249+
start = "2024-04-02"
250+
end = "2026-06-11"
251+
252+
[[trusted.windows_x86_64_gnullvm]]
253+
criteria = "safe-to-deploy"
254+
user-id = 64539 # Kenny Kerr (kennykerr)
255+
start = "2022-09-01"
256+
end = "2026-06-11"

‎supply-chain/config.toml‎

Lines changed: 125 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,125 @@
1+
2+
# cargo-vet config file
3+
4+
[cargo-vet]
5+
version = "0.10"
6+
7+
[imports.bytecode-alliance]
8+
url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
9+
10+
[imports.google]
11+
url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
12+
13+
[imports.mozilla]
14+
url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
15+
16+
[policy.wasm-component-trampoline]
17+
audit-as-crates-io = true
18+
19+
[[exemptions.addr2line]]
20+
version = "0.24.2"
21+
criteria = "safe-to-deploy"
22+
23+
[[exemptions.allocator-api2]]
24+
version = "0.2.21"
25+
criteria = "safe-to-deploy"
26+
27+
[[exemptions.derivative]]
28+
version = "2.2.0"
29+
criteria = "safe-to-deploy"
30+
31+
[[exemptions.embedded-io]]
32+
version = "0.6.1"
33+
criteria = "safe-to-deploy"
34+
35+
[[exemptions.fallible-iterator]]
36+
version = "0.3.0"
37+
criteria = "safe-to-deploy"
38+
39+
[[exemptions.futures-task]]
40+
version = "0.3.31"
41+
criteria = "safe-to-deploy"
42+
43+
[[exemptions.futures-util]]
44+
version = "0.3.31"
45+
criteria = "safe-to-deploy"
46+
47+
[[exemptions.itertools]]
48+
version = "0.14.0"
49+
criteria = "safe-to-deploy"
50+
51+
[[exemptions.log]]
52+
version = "0.4.27"
53+
criteria = "safe-to-deploy"
54+
55+
[[exemptions.miniz_oxide]]
56+
version = "0.8.8"
57+
criteria = "safe-to-deploy"
58+
59+
[[exemptions.object]]
60+
version = "0.36.7"
61+
criteria = "safe-to-deploy"
62+
63+
[[exemptions.once_cell]]
64+
version = "1.21.3"
65+
criteria = "safe-to-deploy"
66+
67+
[[exemptions.postcard]]
68+
version = "1.1.1"
69+
criteria = "safe-to-deploy"
70+
71+
[[exemptions.psm]]
72+
version = "0.1.26"
73+
criteria = "safe-to-deploy"
74+
75+
[[exemptions.redox_syscall]]
76+
version = "0.5.12"
77+
criteria = "safe-to-deploy"
78+
79+
[[exemptions.signal-hook-registry]]
80+
version = "1.4.5"
81+
criteria = "safe-to-deploy"
82+
83+
[[exemptions.snafu]]
84+
version = "0.8.6"
85+
criteria = "safe-to-deploy"
86+
87+
[[exemptions.snafu-derive]]
88+
version = "0.8.6"
89+
criteria = "safe-to-deploy"
90+
91+
[[exemptions.trait-variant]]
92+
version = "0.1.2"
93+
criteria = "safe-to-deploy"
94+
95+
[[exemptions.wasm-component-trampoline]]
96+
version = "0.1.2-pre"
97+
criteria = "safe-to-deploy"
98+
99+
[[exemptions.windows-sys]]
100+
version = "0.52.0"
101+
criteria = "safe-to-deploy"
102+
103+
[[exemptions.windows-sys]]
104+
version = "0.59.0"
105+
criteria = "safe-to-deploy"
106+
107+
[[exemptions.windows_aarch64_msvc]]
108+
version = "0.52.6"
109+
criteria = "safe-to-deploy"
110+
111+
[[exemptions.windows_i686_gnu]]
112+
version = "0.52.6"
113+
criteria = "safe-to-deploy"
114+
115+
[[exemptions.windows_i686_msvc]]
116+
version = "0.52.6"
117+
criteria = "safe-to-deploy"
118+
119+
[[exemptions.windows_x86_64_gnu]]
120+
version = "0.52.6"
121+
criteria = "safe-to-deploy"
122+
123+
[[exemptions.windows_x86_64_msvc]]
124+
version = "0.52.6"
125+
criteria = "safe-to-deploy"

0 commit comments

Comments
 (0)