fix(cargo-deny): ignore unmaintained transitive advisories with rationale

.github/CODEOWNERS

@@ -0,0 +1,2 @@
+# Default owner for everything
+* @KooshaPari

.github/FUNDING.yml

@@ -0,0 +1,11 @@
+github: []
+patreon: # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: # Replace with a single Ko-fi username
+tidelift: "npm/[email protected]"
+community_bridge: # Replace with a single Community Bridge project slug-id
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+otechie: # Replace with a single Otechie username
+lfx_crowdfunding: # Replace with a single LFX Crowdfunding project slug-e.g.
+custom: # Replace with up to 3 custom sponsorship URLs e.g. ['https://example.com/donate']

.github/workflows/autofix.yml

@@ -37,15 +37,15 @@ jobs:
       contents: read
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Install SQLite
       run: sudo apt-get install -y libsqlite3-dev
     - name: Setup Protobuf Compiler
-      uses: arduino/setup-protoc@v3
+      uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
     - name: Setup Rust Toolchain
-      uses: actions-rust-lang/setup-rust-toolchain@v1
+      uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7
       with:
         toolchain: nightly
         components: clippy, rustfmt

.github/workflows/bounty.yml

@@ -44,7 +44,7 @@ jobs:
       issues: write
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Install npm packages
       run: npm install
     - name: Sync all bounty labels
@@ -57,7 +57,7 @@ jobs:
       pull-requests: write
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Install npm packages
       run: npm install
     - name: Sync bounty labels

.github/workflows/cargo-deny.yml

@@ -0,0 +1,19 @@
+name: Cargo Deny
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  cargo-deny:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          tool: cargo-deny
+      - name: Check
+        run: cargo deny check --log-level error

.github/workflows/ci.yml

@@ -41,13 +41,13 @@ jobs:
       contents: read
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Setup Protobuf Compiler
-      uses: arduino/setup-protoc@v3
+      uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
     - name: Setup Rust Toolchain
-      uses: actions-rust-lang/setup-rust-toolchain@v1
+      uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7
       with:
         toolchain: stable
     - name: Install cargo-llvm-cov
@@ -61,13 +61,13 @@ jobs:
       contents: read
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Setup Protobuf Compiler
-      uses: arduino/setup-protoc@v3
+      uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
     - name: Setup Rust Toolchain
-      uses: actions-rust-lang/setup-rust-toolchain@v1
+      uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7
       with:
         toolchain: stable
     - name: Run performance benchmark
@@ -86,10 +86,10 @@ jobs:
       crate_release_id: ${{ steps.set_output.outputs.crate_release_id }}
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - id: create_release
       name: Draft Release
-      uses: release-drafter/release-drafter@v7
+      uses: release-drafter/release-drafter@563bf132657a13ded0b01fcb723c5a58cdd824e2
       with:
         config-name: release-drafter.yml
       env:
@@ -106,7 +106,7 @@ jobs:
       crate_release_id: ${{ steps.set_output.outputs.crate_release_id }}
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - id: set_output
       name: Set Release Version
       run: echo "crate_release_name=pr-build-${{ github.event.number }}" >> $GITHUB_OUTPUT && echo "crate_release_id=pr-build-${{ github.event.number }}" >> $GITHUB_OUTPUT
@@ -169,15 +169,15 @@ jobs:
           target: aarch64-linux-android
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Setup Protobuf Compiler
       if: ${{ matrix.cross == 'false' }}
-      uses: arduino/setup-protoc@v3
+      uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
     - name: Setup Cross Toolchain
       if: ${{ matrix.cross == 'false' }}
-      uses: taiki-e/setup-cross-toolchain-action@v1
+      uses: taiki-e/setup-cross-toolchain-action@74847e552ab5bf79fa4393ed975e297ea57d53fa
       with:
         target: ${{ matrix.target }}
     - name: Add Rust target
@@ -187,7 +187,7 @@ jobs:
       if: '!(contains(matrix.target, ''-unknown-linux-'') || contains(matrix.target, ''-android''))'
       run: echo "RUSTFLAGS=-C target-feature=+crt-static" >> $GITHUB_ENV
     - name: Build Binary
-      uses: ClementTsang/cargo-action@v0.0.7
+      uses: ClementTsang/cargo-action@2438cc5f3ba4e971289fffca2a00dedea6911f14
       with:
         command: build --release
         args: '--target ${{ matrix.target }}'
@@ -200,7 +200,7 @@ jobs:
     - name: Copy Binary
       run: cp ${{ matrix.binary_path }} ${{ matrix.binary_name }}
     - name: Upload to Release
-      uses: xresloader/upload-to-github-release@v1
+      uses: xresloader/upload-to-github-release@7497a58a53ca2f4450d41ca19fabb22de5c0ed0b
       with:
         release_id: ${{ needs.draft_release.outputs.crate_release_id }}
         file: ${{ matrix.binary_name }}
@@ -264,15 +264,15 @@ jobs:
           target: aarch64-linux-android
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Setup Protobuf Compiler
       if: ${{ matrix.cross == 'false' }}
-      uses: arduino/setup-protoc@v3
+      uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
     - name: Setup Cross Toolchain
       if: ${{ matrix.cross == 'false' }}
-      uses: taiki-e/setup-cross-toolchain-action@v1
+      uses: taiki-e/setup-cross-toolchain-action@74847e552ab5bf79fa4393ed975e297ea57d53fa
       with:
         target: ${{ matrix.target }}
     - name: Add Rust target
@@ -282,7 +282,7 @@ jobs:
       if: '!(contains(matrix.target, ''-unknown-linux-'') || contains(matrix.target, ''-android''))'
       run: echo "RUSTFLAGS=-C target-feature=+crt-static" >> $GITHUB_ENV
     - name: Build Binary
-      uses: ClementTsang/cargo-action@v0.0.7
+      uses: ClementTsang/cargo-action@2438cc5f3ba4e971289fffca2a00dedea6911f14
       with:
         command: build --release
         args: '--target ${{ matrix.target }}'

.github/workflows/labels.yml

@@ -30,7 +30,7 @@ jobs:
       issues: write
     steps:
     - name: Checkout
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Sync labels
       run: |-
         npx github-label-sync \

.github/workflows/release-drafter.yml

@@ -40,13 +40,13 @@ jobs:
     steps:
     - name: Auto Labeler
       if: github.event_name == 'pull_request_target'
-      uses: release-drafter/release-drafter/autolabeler@v7
+      uses: release-drafter/release-drafter/autolabeler@563bf132657a13ded0b01fcb723c5a58cdd824e2
       with:
         config-name: release-drafter.yml
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - name: Release Drafter
-      uses: release-drafter/release-drafter@v7
+      uses: release-drafter/release-drafter@563bf132657a13ded0b01fcb723c5a58cdd824e2
       with:
         config-name: release-drafter.yml
       env:

.github/workflows/release.yml

@@ -80,15 +80,15 @@ jobs:
           target: aarch64-linux-android
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
     - name: Setup Protobuf Compiler
       if: ${{ matrix.cross == 'false' }}
-      uses: arduino/setup-protoc@v3
+      uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
     - name: Setup Cross Toolchain
       if: ${{ matrix.cross == 'false' }}
-      uses: taiki-e/setup-cross-toolchain-action@v1
+      uses: taiki-e/setup-cross-toolchain-action@74847e552ab5bf79fa4393ed975e297ea57d53fa
       with:
         target: ${{ matrix.target }}
     - name: Add Rust target
@@ -98,7 +98,7 @@ jobs:
       if: '!(contains(matrix.target, ''-unknown-linux-'') || contains(matrix.target, ''-android''))'
       run: echo "RUSTFLAGS=-C target-feature=+crt-static" >> $GITHUB_ENV
     - name: Build Binary
-      uses: ClementTsang/cargo-action@v0.0.7
+      uses: ClementTsang/cargo-action@2438cc5f3ba4e971289fffca2a00dedea6911f14
       with:
         command: build --release
         args: '--target ${{ matrix.target }}'
@@ -111,7 +111,7 @@ jobs:
     - name: Copy Binary
       run: cp ${{ matrix.binary_path }} ${{ matrix.binary_name }}
     - name: Upload to Release
-      uses: xresloader/upload-to-github-release@v1
+      uses: xresloader/upload-to-github-release@7497a58a53ca2f4450d41ca19fabb22de5c0ed0b
       with:
         release_id: ${{ github.event.release.id }}
         file: ${{ matrix.binary_name }}
@@ -128,7 +128,7 @@ jobs:
         - antinomyhq/npm-forgecode
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       with:
         repository: ${{ matrix.repository }}
         ref: main
@@ -146,7 +146,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Code
-      uses: actions/checkout@v6
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       with:
         repository: antinomyhq/homebrew-code-forge
         ref: main

.github/workflows/stale.yml

@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Mark Stale Issues
-      uses: actions/stale@v10
+      uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f
       with:
         stale-issue-label: 'state: inactive'
         stale-pr-label: 'state: inactive'

.github/workflows/trufflehog.yml

@@ -0,0 +1,17 @@
+name: Trufflehog Secrets Scan
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  trufflehog:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        with:
+          fetch-depth: 0
+      - uses: trufflehog/actions/setup@main
+      - run: trufflehog github --only-verified --no-update
+        env:
+          GH_TOKEN: \${{ secrets.GITHUB_TOKEN }}

CHANGELOG.md

@@ -0,0 +1,20 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+### Changed
+### Deprecated
+### Removed
+### Fixed
+### Security
+
+## [0.1.0] - YYYY-MM-DD
+
+### Added
+- Initial release