Import Rust crate audits from Fermyon

This commit is contained in:
Jack Grigg 2024-04-23 00:04:49 +00:00
parent 846d9860f1
commit e574c27755
2 changed files with 8 additions and 4 deletions

View File

@ -10,6 +10,9 @@ url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-c
[imports.embark-studios]
url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
[imports.fermyon]
url = "https://raw.githubusercontent.com/fermyon/spin/main/supply-chain/audits.toml"
[imports.google]
url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
@ -469,10 +472,6 @@ criteria = "safe-to-deploy"
version = "1.18.0"
criteria = "safe-to-deploy"
[[exemptions.oorandom]]
version = "11.1.3"
criteria = "safe-to-run"
[[exemptions.os_str_bytes]]
version = "6.6.1"
criteria = "safe-to-run"

View File

@ -396,6 +396,11 @@ criteria = "safe-to-deploy"
version = "0.22.4"
notes = "Inspected it to confirm that it only contains data definitions and no runtime code"
[[audits.fermyon.audits.oorandom]]
who = "Radu Matei <radu.matei@fermyon.com>"
criteria = "safe-to-run"
version = "11.1.3"
[[audits.google.audits.async-stream]]
who = "Tyler Mandry <tmandry@google.com>"
criteria = "safe-to-deploy"