diff --git a/Cargo.lock b/Cargo.lock index 2b41b08..8217bb5 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -699,31 +699,27 @@ version = "1.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "67913b90ecf5c59b7d507927fc1ec496413ec252ffb6734f15876726b8fc7221" dependencies = [ - "forensicnomicon-core 1.1.0", + "forensicnomicon-core", "forensicnomicon-data", "serde", ] [[package]] name = "forensicnomicon-core" -version = "1.1.0" +version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b81fa3bf717c97e0b7a877f30e6bf4abaf9dca751d970dab9292d03ae757d152" +checksum = "21800c5e29085274fbb324be30790894481c9c5faf8c659b3d0d994840ca0941" dependencies = [ "serde", ] -[[package]] -name = "forensicnomicon-core" -version = "1.4.0" - [[package]] name = "forensicnomicon-data" version = "1.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "81a1473002767608b095a3dcd657ffb3c4c6e421c5cfe9fdca70a30fe477e0b7" dependencies = [ - "forensicnomicon-core 1.1.0", + "forensicnomicon-core", "serde", ] @@ -1178,9 +1174,11 @@ checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" [[package]] name = "peripheral-core" -version = "0.8.1" +version = "0.8.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "97153772c888a0e1ecf9e45a54b0d20933402e406fd1a289db94ae07fbcf7153" dependencies = [ - "forensicnomicon-core 1.4.0", + "forensicnomicon-core", "shellitem", "winreg-core", ] diff --git a/Cargo.toml b/Cargo.toml index fd63342..683e48e 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -31,11 +31,9 @@ forensicnomicon = "1.6" # Device-connection domain reader: setupapi.dev.log, SYSTEM-hive Enum device keys # (+ MountedDevices drive-letter join), Linux kernel logs, MountPoints2, and the # BagMRU ShellBags reader (drive-letter browsed folders), each decoded to typed -# records. Path + version during the in-flight E2 shellbag change: the shellbag -# reader is unpublished, so resolve peripheral-core locally within the fleet -# umbrella (mirrors peripheral-core's own forensicnomicon-core path dep). Switch to -# the pure registry `version = "0.9"` once peripheral-core publishes the reader. -peripheral-core = { version = "0.8", path = "../peripheral-forensic/core" } +# records. 0.8.2 is the first published version carrying the ShellBags reader, +# so this is a plain registry dependency again. +peripheral-core = { version = "0.8" } # Opens a SYSTEM hive in memory so peripheral-core's registry reader can decode it. winreg-core = "0.2" # macOS Apple-device connection history (com.apple.iPod.plist); 1.10 ships the diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index 2772ccb..a6f296b 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -2,3 +2,15 @@ # cargo-vet audits file [audits] + +[[trusted.forensicnomicon-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-28" +end = "2027-08-04" + +[[trusted.peripheral-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-13" +end = "2027-08-04" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 820a325..531ab3f 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -263,10 +263,6 @@ criteria = "safe-to-deploy" version = "1.6.0" criteria = "safe-to-deploy" -[[exemptions.forensicnomicon-core]] -version = "1.1.0" -criteria = "safe-to-deploy" - [[exemptions.forensicnomicon-data]] version = "1.2.1" criteria = "safe-to-deploy" @@ -451,10 +447,6 @@ criteria = "safe-to-deploy" version = "1.70.2" criteria = "safe-to-deploy" -[[exemptions.peripheral-core]] -version = "0.8.0" -criteria = "safe-to-deploy" - [[exemptions.pin-project-lite]] version = "0.2.17" criteria = "safe-to-deploy" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 18c9d0e..b81947b 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -8,6 +8,20 @@ user-id = 696 user-login = "fitzgen" user-name = "Nick Fitzgerald" +[[publisher.forensicnomicon-core]] +version = "1.5.0" +when = "2026-07-29" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.peripheral-core]] +version = "0.8.2" +when = "2026-08-04" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + [[publisher.unicode-width]] version = "0.1.14" when = "2024-09-19"