nagai/fune
3
0
Fork 0
forked from mirrors/gecko-dev
Code Pull requests Activity

Bug 1826668 — Switch to Google's aggregated set. r=nika,supply-chain-reviewers

Browse source 
Differential Revision: https://phabricator.services.mozilla.com/D174820
This commit is contained in:
Bobby Holley 2023-04-06 15:51:13 +00:00
parent 9b2181ad57
commit d66f5bc69f
2 changed files with 17 additions and 20 deletions
repo.diff.show_diff_stats Download patch file Download diff file Expand all files Collapse all files

5
supply-chain/config.toml
View file

@ -11,10 +11,7 @@ url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-c
url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml" url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
[imports.google] [imports.google]
url = [ url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
"https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT",
"https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT",
]
[imports.isrg] [imports.isrg]
url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml" url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml"

32
supply-chain/imports.lock
View file

@ -294,55 +294,55 @@ notes = """
`does-not-implement-crypto` is certified because this crate explicitly says `does-not-implement-crypto` is certified because this crate explicitly says
that the RNG here is not cryptographically secure. that the RNG here is not cryptographically secure.
""" """
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.h2]] [[audits.google.audits.h2]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.3.14" version = "0.3.14"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.http]] [[audits.google.audits.http]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.2.8" version = "0.2.8"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.http-body]] [[audits.google.audits.http-body]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.4.5" version = "0.4.5"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.httpdate]] [[audits.google.audits.httpdate]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "1.0.2" version = "1.0.2"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.hyper]] [[audits.google.audits.hyper]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.14.20" version = "0.14.20"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.pin-project]] [[audits.google.audits.pin-project]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "1.0.12" version = "1.0.12"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.pin-project-internal]] [[audits.google.audits.pin-project-internal]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "1.0.12" version = "1.0.12"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.serde_urlencoded]] [[audits.google.audits.serde_urlencoded]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.7.1" version = "0.7.1"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.tokio-stream]] [[audits.google.audits.tokio-stream]]
who = "David Koloski <dkoloski@google.com>" who = "David Koloski <dkoloski@google.com>"
@ -355,43 +355,43 @@ aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/th
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.3.2" version = "0.3.2"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.tracing]] [[audits.google.audits.tracing]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.1.35" version = "0.1.35"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.tracing-attributes]] [[audits.google.audits.tracing-attributes]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.1.22" version = "0.1.22"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.tracing-core]] [[audits.google.audits.tracing-core]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.1.29" version = "0.1.29"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.try-lock]] [[audits.google.audits.try-lock]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.2.3" version = "0.2.3"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.version_check]] [[audits.google.audits.version_check]]
who = "George Burgess IV <gbiv@google.com>" who = "George Burgess IV <gbiv@google.com>"
criteria = "safe-to-deploy" criteria = "safe-to-deploy"
version = "0.9.4" version = "0.9.4"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.want]] [[audits.google.audits.want]]
who = "ChromeOS" who = "ChromeOS"
criteria = "safe-to-run" criteria = "safe-to-run"
version = "0.3.0" version = "0.3.0"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.isrg.audits.block-buffer]] [[audits.isrg.audits.block-buffer]]
who = "David Cook <dcook@divviup.org>" who = "David Cook <dcook@divviup.org>"