From d872f32514f3e9e4809cd4335599d550bf0122a4 Mon Sep 17 00:00:00 2001
From: Oliver Hamlet <git@ortham.net>
Date: Sun, 28 Sep 2025 19:25:44 +0100
Subject: [PATCH] Trust libc dependency

It lives under the rust-lang organisation on GitHub, so is hopefully as trustworthy as the Rust toolchain itself.
---
 supply-chain/audits.toml  | 6 ++++++
 supply-chain/config.toml  | 4 ----
 supply-chain/imports.lock | 6 ++++++
 3 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
index d131c7f2..a908e406 100644
--- a/supply-chain/audits.toml
+++ b/supply-chain/audits.toml
@@ -3,6 +3,12 @@
 
 [audits]
 
+[[trusted.libc]]
+criteria = "safe-to-deploy"
+user-id = 55123 # rust-lang-owner
+start = "2024-08-15"
+end = "2026-09-28"
+
 [[trusted.windows]]
 criteria = "safe-to-deploy"
 user-id = 64539 # Kenny Kerr (kennykerr)
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 319a9c22..7976c3f6 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -157,10 +157,6 @@ criteria = "safe-to-deploy"
 version = "0.2.0"
 criteria = "safe-to-deploy"
 
-[[exemptions.libc]]
-version = "0.2.171"
-criteria = "safe-to-deploy"
-
 [[exemptions.libloading]]
 version = "0.8.6"
 criteria = "safe-to-deploy"
diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
index e902bce8..db0947f0 100644
--- a/supply-chain/imports.lock
+++ b/supply-chain/imports.lock
@@ -8,6 +8,12 @@ user-id = 4484
 user-login = "hsivonen"
 user-name = "Henri Sivonen"
 
+[[publisher.libc]]
+version = "0.2.171"
+when = "2025-03-11"
+user-id = 55123
+user-login = "rust-lang-owner"
+
 [[publisher.unicode-segmentation]]
 version = "1.12.0"
 when = "2024-09-13"