From 1519a49ce9674835a5d7708099dffeddc4c59b21 Mon Sep 17 00:00:00 2001 From: Oliver Hamlet Date: Sun, 28 Sep 2025 20:29:58 +0100 Subject: [PATCH] Suppress audit suggestions for crates not used on target platforms I only test libloot for x86 Windows, x86-64 Windows and x86-64 Linux in CI. Ideally there would be a way to tell cargo-vet to ignore dependencies that aren't relevant to a given set of targets, as having them exempt like this could hide the need to audit them if they do become relevant to those targets in the future, but without the supression `cargo vet suggest`'s output is just too noisy. --- supply-chain/config.toml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index ad39ffb1..1e9553a0 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -124,6 +124,8 @@ criteria = "safe-to-deploy" [[exemptions.errno]] version = "0.3.11" criteria = "safe-to-run" +suggest = false +notes = "At time of review this was only built if targeting WASI, which is not an intended target." [[exemptions.esplugin]] version = "6.1.3" @@ -164,6 +166,8 @@ criteria = "safe-to-deploy" [[exemptions.libredox]] version = "0.1.3" criteria = "safe-to-deploy" +suggest = false +notes = "At time of review this was only built if targeting Redox, which is not an intended target." [[exemptions.link-cplusplus]] version = "1.0.10" @@ -172,6 +176,8 @@ criteria = "safe-to-deploy" [[exemptions.linux-raw-sys]] version = "0.9.3" criteria = "safe-to-run" +suggest = false +notes = "At time of review this was only built if targeting WASI, which is not an intended target." [[exemptions.log]] version = "0.4.28" @@ -284,10 +290,14 @@ criteria = "safe-to-deploy" [[exemptions.r-efi]] version = "5.2.0" criteria = "safe-to-run" +suggest = false +notes = "At time of review this was only built if targeting UEFI, which is not an intended target." [[exemptions.redox_users]] version = "0.5.0" criteria = "safe-to-deploy" +suggest = false +notes = "At time of review this was only built if targeting Redox, which is not an intended target." [[exemptions.regex]] version = "1.11.1" @@ -308,6 +318,8 @@ criteria = "safe-to-deploy" [[exemptions.rustix]] version = "1.0.5" criteria = "safe-to-run" +suggest = false +notes = "At time of review this was only built if targeting WASI, which is not an intended target." [[exemptions.saphyr]] version = "0.0.6" @@ -364,10 +376,14 @@ criteria = "safe-to-deploy" [[exemptions.wasi]] version = "0.11.0+wasi-snapshot-preview1" criteria = "safe-to-deploy" +suggest = false +notes = "At time of review this was only built if targeting WASI, which is not an intended target." [[exemptions.wasi]] version = "0.14.2+wasi-0.2.4" criteria = "safe-to-run" +suggest = false +notes = "At time of review this was only built if targeting WASI, which is not an intended target." [[exemptions.winapi]] version = "0.3.9"