loot/libloot
0
0
Fork 0
mirror of https://github.com/loot/libloot.git synced 2026-07-27 14:16:01 -07:00
Code Issues Packages Projects Releases Wiki Activity

Make a note of some cargo vet exemptions owned by rust-lang

Browse Source 
It's probably OK to trust the publishers in the future (cc is currently published using Trusted Publishing, hashbrown by the rust-lang-owner bot, and regex/regex-automata by burntsushi), since I've already got a trust relationship with rust-lang.
This commit is contained in:
Oliver Hamlet
2026-01-07 21:18:26 +00:00
parent 947875d884
commit fadb4f2b93
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
supply-chain/config.toml
+4
View File
@@ -39,6 +39,7 @@ criteria = "safe-to-deploy"
[[exemptions.cc]]
version = "1.2.18"
criteria = "safe-to-deploy"
notes = "This crate's source repo is owned by the rust-lang GitHub org."
[[exemptions.const-random]]
version = "0.1.18"
@@ -133,6 +134,7 @@ criteria = "safe-to-deploy"
[[exemptions.hashbrown]]
version = "0.14.5"
criteria = "safe-to-deploy"
notes = "This crate's source repo is owned by the rust-lang GitHub org."
[[exemptions.hashlink]]
version = "0.10.0"
@@ -269,10 +271,12 @@ notes = "At time of review this was only built if targeting Redox, which is not
[[exemptions.regex]]
version = "1.11.1"
criteria = "safe-to-deploy"
notes = "This crate's source repo is owned by the rust-lang GitHub org."
[[exemptions.regex-automata]]
version = "0.4.9"
criteria = "safe-to-deploy"
notes = "This crate's source repo is owned by the rust-lang GitHub org."
[[exemptions.regress]]
version = "0.10.4"