Skip to content

ci: repin fleet-ci so this repo's own deny.toml is used again #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
h4x0r merged 3 commits into from
Aug 8, 2026
Merged

ci: repin fleet-ci so this repo's own deny.toml is used again #7

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
2bb89f1
ci: repin fleet-ci so this repo's own deny.toml is used again
h4x0r Aug 7, 2026
111229c
fix(msrv): pin uuid down to 1.20.0 so the declared 1.81 floor holds
h4x0r Aug 7, 2026
4ba6b3d
fix(supply-chain): vet records for the versions the MSRV pin resolves
h4x0r Aug 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,4 +18,4 @@ jobs:
# and MSRV is read from rust-version. Anything that needed configuring would be
# a behaviour change smuggled in by an adoption PR, so there is nothing here.
ci:
uses: SecurityRonin/fleet-ci/.github/workflows/rust-ci.yml@a62ab10603151071744cec0b4e3638aa6406d4e4
uses: SecurityRonin/fleet-ci/.github/workflows/rust-ci.yml@f9802dca64a95eb881fd05dd3f4f16e53b97f2b3
4 changes: 2 additions & 2 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

42 changes: 39 additions & 3 deletions supply-chain/audits.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,23 +9,41 @@ user-id = 347968 # Albert Hui (h4x0r)
start = "2026-06-13"
end = "2027-08-01"

[[trusted.ewf]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-03-05"
end = "2027-08-07"

[[trusted.forensic-vfs]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-07-07"
end = "2027-08-07"

[[trusted.forensicnomicon]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-06-05"
end = "2027-08-01"
end = "2027-08-07"

[[trusted.forensicnomicon-core]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-06-28"
end = "2027-08-01"
end = "2027-08-07"

[[trusted.forensicnomicon-data]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-06-28"
end = "2027-08-01"
end = "2027-08-07"

[[trusted.jsonguard]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-05-21"
end = "2027-08-07"

[[trusted.lnk-core]]
criteria = "safe-to-deploy"
Expand All @@ -39,6 +57,18 @@ user-id = 347968 # Albert Hui (h4x0r)
start = "2026-06-13"
end = "2027-08-01"

[[trusted.safe-decode]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-08-02"
end = "2027-08-07"

[[trusted.safe-read]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-07-15"
end = "2027-08-07"

[[trusted.segb-core]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
Expand Down Expand Up @@ -69,6 +99,12 @@ user-id = 347968 # Albert Hui (h4x0r)
start = "2026-06-13"
end = "2027-08-01"

[[trusted.state-history-forensic]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
start = "2026-06-16"
end = "2027-08-07"

[[trusted.winreg-artifacts]]
criteria = "safe-to-deploy"
user-id = 347968 # Albert Hui (h4x0r)
Expand Down
6 changes: 1 addition & 5 deletions supply-chain/config.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -144,7 +144,7 @@ version = "1.0.24"
criteria = "safe-to-deploy"

[[exemptions.uuid]]
version = "1.23.4"
version = "1.20.0"
criteria = "safe-to-deploy"

[[exemptions.wasm-bindgen]]
Expand All @@ -166,7 +166,3 @@ criteria = "safe-to-deploy"
[[exemptions.web-time]]
version = "1.1.0"
criteria = "safe-to-deploy"

[[exemptions.zmij]]
version = "1.0.21"
criteria = "safe-to-deploy"
18 changes: 18 additions & 0 deletions supply-chain/imports.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -327,3 +327,21 @@ who = "Jan-Erik Rediger <jrediger@mozilla.com>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.106"
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"

[[audits.mozilla.audits.zmij]]
who = "Benjamin VanderSloot <bvandersloot@mozilla.com>"
criteria = "safe-to-deploy"
version = "1.0.20"
notes = """
A lot of unsafe code here, included as a dependency of serde_json.
The testing is very thorough, validating all 32-bit floats, and 100m
random 64-bit floats. No unsafe imports.
"""
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"

[[audits.mozilla.audits.zmij]]
who = "Ben Dean-Kawamura <bdk@mozilla.com>"
criteria = "safe-to-deploy"
delta = "1.0.20 -> 1.0.21"
notes = "Almost no code changes. No new unsafe code."
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
Loading