зеркало из https://github.com/mozilla/gecko-dev.git
Bug 1815773 — Import chromeOS audits. r=nika,supply-chain-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D169245
This commit is contained in:
Bobby Holley
Родитель
946e7eee91
Коммит
69d8732b44
|
|
@ -4,6 +4,9 @@
|
|||
[imports.bytecodealliance]
|
||||
url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
|
||||
|
||||
[imports.chromeos]
|
||||
url = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT"
|
||||
|
||||
[imports.embark]
|
||||
url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
|
||||
|
||||
|
|
@ -615,10 +618,6 @@ criteria = "safe-to-deploy"
|
|||
version = "0.1.1"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.h2]]
|
||||
version = "0.3.13"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.hashlink]]
|
||||
version = "0.7.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
|
@ -639,26 +638,10 @@ criteria = "safe-to-deploy"
|
|||
version = "0.2.1"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.http]]
|
||||
version = "0.2.8"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.http-body]]
|
||||
version = "0.4.5"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.httparse]]
|
||||
version = "1.7.1"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.httpdate]]
|
||||
version = "1.0.2"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.hyper]]
|
||||
version = "0.14.19"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.ident_case]]
|
||||
version = "1.0.1"
|
||||
criteria = "safe-to-deploy"
|
||||
|
|
@ -917,14 +900,6 @@ criteria = "safe-to-deploy"
|
|||
version = "0.10.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.pin-project]]
|
||||
version = "1.0.10"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.pin-project-internal]]
|
||||
version = "1.0.10"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.pin-project-lite]]
|
||||
version = "0.2.9"
|
||||
criteria = "safe-to-deploy"
|
||||
|
|
@ -1105,10 +1080,6 @@ criteria = "safe-to-deploy"
|
|||
version = "0.1.8"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.serde_urlencoded]]
|
||||
version = "0.7.1"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.serde_with]]
|
||||
version = "1.14.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
|
@ -1237,30 +1208,10 @@ criteria = "safe-to-run"
|
|||
version = "0.5.9"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.tower-service]]
|
||||
version = "0.3.1"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.tracing]]
|
||||
version = "0.1.35"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.tracing-attributes]]
|
||||
version = "0.1.21"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.tracing-core]]
|
||||
version = "0.1.27"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.triple_buffer]]
|
||||
version = "5.0.6"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.try-lock]]
|
||||
version = "0.2.3"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.type-map]]
|
||||
version = "0.4.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
|
@ -1309,10 +1260,6 @@ criteria = "safe-to-deploy"
|
|||
version = "2.3.2"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.want]]
|
||||
version = "0.3.0"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.warp]]
|
||||
version = "0.3.2"
|
||||
criteria = "safe-to-run"
|
||||
|
|
|
|||
|
|
@ -318,6 +318,805 @@ criteria = "safe-to-deploy"
|
|||
version = "48.0.0"
|
||||
notes = "The Bytecode Alliance is the author of this crate."
|
||||
|
||||
[audits.chromeos.criteria.crypto-safe]
|
||||
description = """
|
||||
All crypto algorithms in this crate have been reviewed by a relevant expert.
|
||||
|
||||
**Note**: If a crate does not implement crypto, use `does-not-implement-crypto`,
|
||||
which implies `crypto-safe`, but does not require expert review in order to
|
||||
audit for."""
|
||||
|
||||
[audits.chromeos.criteria.does-not-implement-crypto]
|
||||
description = """
|
||||
Inspection reveals that the crate in question does not attempt to implement any
|
||||
cryptographic algorithms on its own.
|
||||
|
||||
Note that certification of this does not require an expert on all forms of
|
||||
cryptography: it's expected for crates we import to be \"good enough\" citizens,
|
||||
so they'll at least be forthcoming if they try to implement something
|
||||
cryptographic. When in doubt, please ask an expert."""
|
||||
implies = "crypto-safe"
|
||||
|
||||
[audits.chromeos.criteria.rule-of-two-safe-to-deploy]
|
||||
description = """
|
||||
This is a stronger requirement than the built-in safe-to-deploy criteria,
|
||||
motivated by Chromium's rule-of-two related requirements:
|
||||
https://chromium.googlesource.com/chromium/src/+/master/docs/security/rule-of-2.md#unsafe-code-in-safe-languages
|
||||
|
||||
This crate will not introduce a serious security vulnerability to production
|
||||
software exposed to untrusted input.
|
||||
|
||||
Auditors are not required to perform a full logic review of the entire crate.
|
||||
Rather, they must review enough to fully reason about the behavior of all unsafe
|
||||
blocks and usage of powerful imports. For any reasonable usage of the crate in
|
||||
real-world software, an attacker must not be able to manipulate the runtime
|
||||
behavior of these sections in an exploitable or surprising way.
|
||||
|
||||
Ideally, ambient capabilities (e.g. filesystem access) are hardened against
|
||||
manipulation and consistent with the advertised behavior of the crate. However,
|
||||
some discretion is permitted. In such cases, the nature of the discretion should
|
||||
be recorded in the `notes` field of the audit record.
|
||||
|
||||
Any unsafe code in this crate must, in general, be kept well-contained, and
|
||||
documentation must exist to describe how Rust's invariants are being upheld
|
||||
despite the unsafe block(s). Nontrivial uses of unsafe must be reviewed by an
|
||||
expert in Rust's unsafety guarantees/non-guarantees.
|
||||
|
||||
For crates which generate deployed code (e.g. build dependencies or procedural
|
||||
macros), reasonable usage of the crate should output code which meets the above
|
||||
criteria."""
|
||||
implies = "safe-to-deploy"
|
||||
|
||||
[[audits.chromeos.audits.aho-corasick]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.7.18"
|
||||
|
||||
[[audits.chromeos.audits.anyhow]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.0.68"
|
||||
|
||||
[[audits.chromeos.audits.arbitrary]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.1.6"
|
||||
|
||||
[[audits.chromeos.audits.arbitrary]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.2.2"
|
||||
|
||||
[[audits.chromeos.audits.async-trait]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.48"
|
||||
|
||||
[[audits.chromeos.audits.async-trait]]
|
||||
who = "Android Legacy"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.1.61"
|
||||
|
||||
[[audits.chromeos.audits.atty]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.14"
|
||||
|
||||
[[audits.chromeos.audits.autocfg]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.1.8"
|
||||
|
||||
[[audits.chromeos.audits.base64]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.13.0"
|
||||
|
||||
[[audits.chromeos.audits.bindgen]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.57.0"
|
||||
|
||||
[[audits.chromeos.audits.bindgen]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.60.1"
|
||||
|
||||
[[audits.chromeos.audits.bindgen]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.63.0"
|
||||
|
||||
[[audits.chromeos.audits.bitflags]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.2.1"
|
||||
|
||||
[[audits.chromeos.audits.bitreader]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.6"
|
||||
|
||||
[[audits.chromeos.audits.bytes]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.5.6"
|
||||
|
||||
[[audits.chromeos.audits.bytes]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.1"
|
||||
|
||||
[[audits.chromeos.audits.cexpr]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.4.0"
|
||||
|
||||
[[audits.chromeos.audits.cexpr]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.5.0"
|
||||
|
||||
[[audits.chromeos.audits.cfg-if]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.0"
|
||||
|
||||
[[audits.chromeos.audits.chrono]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.4.23"
|
||||
|
||||
[[audits.chromeos.audits.clang-sys]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.2.0"
|
||||
|
||||
[[audits.chromeos.audits.clap]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "2.33.3"
|
||||
|
||||
[[audits.chromeos.audits.clap]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "3.2.22"
|
||||
|
||||
[[audits.chromeos.audits.clap_derive]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "3.2.18"
|
||||
|
||||
[[audits.chromeos.audits.clap_lex]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.4"
|
||||
|
||||
[[audits.chromeos.audits.cmake]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.45"
|
||||
|
||||
[[audits.chromeos.audits.cmake]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.48"
|
||||
|
||||
[[audits.chromeos.audits.cty]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.2.2"
|
||||
|
||||
[[audits.chromeos.audits.dbus]]
|
||||
who = "ChromeOS Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.9.5"
|
||||
|
||||
[[audits.chromeos.audits.env_logger]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.8.3"
|
||||
|
||||
[[audits.chromeos.audits.error-chain]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.11.0"
|
||||
|
||||
[[audits.chromeos.audits.euclid]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.22.7"
|
||||
|
||||
[[audits.chromeos.audits.futures]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.futures-channel]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.futures-core]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.futures-executor]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.futures-io]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.futures-macro]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.futures-sink]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.futures-task]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.futures-util]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.getrandom]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.2"
|
||||
|
||||
[[audits.chromeos.audits.getrandom]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.7"
|
||||
|
||||
[[audits.chromeos.audits.glob]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.0"
|
||||
|
||||
[[audits.chromeos.audits.h2]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.14"
|
||||
|
||||
[[audits.chromeos.audits.heck]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.4.0"
|
||||
|
||||
[[audits.chromeos.audits.hex]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.4.3"
|
||||
|
||||
[[audits.chromeos.audits.http]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.8"
|
||||
|
||||
[[audits.chromeos.audits.http-body]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.4.5"
|
||||
|
||||
[[audits.chromeos.audits.httpdate]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.2"
|
||||
|
||||
[[audits.chromeos.audits.hyper]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.14.20"
|
||||
|
||||
[[audits.chromeos.audits.instant]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.9"
|
||||
|
||||
[[audits.chromeos.audits.itertools]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.9.0"
|
||||
|
||||
[[audits.chromeos.audits.itertools]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.10.5"
|
||||
|
||||
[[audits.chromeos.audits.itoa]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.4.7"
|
||||
|
||||
[[audits.chromeos.audits.itoa]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.0.5"
|
||||
|
||||
[[audits.chromeos.audits.lazy_static]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.4.0"
|
||||
|
||||
[[audits.chromeos.audits.lazycell]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.3.0"
|
||||
|
||||
[[audits.chromeos.audits.libc]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.86"
|
||||
|
||||
[[audits.chromeos.audits.libdbus-sys]]
|
||||
who = "ChromeOS Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.2"
|
||||
|
||||
[[audits.chromeos.audits.libloading]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.7.0"
|
||||
|
||||
[[audits.chromeos.audits.lock_api]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.4.2"
|
||||
|
||||
[[audits.chromeos.audits.lock_api]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.4.9"
|
||||
|
||||
[[audits.chromeos.audits.log]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.4.14"
|
||||
|
||||
[[audits.chromeos.audits.log]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.4.17"
|
||||
|
||||
[[audits.chromeos.audits.memchr]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "2.4.0"
|
||||
|
||||
[[audits.chromeos.audits.memchr]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "2.4.1"
|
||||
|
||||
[[audits.chromeos.audits.mime]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.16"
|
||||
|
||||
[[audits.chromeos.audits.mio]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.7.7"
|
||||
|
||||
[[audits.chromeos.audits.mio]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.7.14"
|
||||
|
||||
[[audits.chromeos.audits.nix]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.19.1"
|
||||
|
||||
[[audits.chromeos.audits.nix]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.20.0"
|
||||
|
||||
[[audits.chromeos.audits.nix]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.24.2"
|
||||
|
||||
[[audits.chromeos.audits.nom]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "5.1.2"
|
||||
|
||||
[[audits.chromeos.audits.nom]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "6.1.2"
|
||||
|
||||
[[audits.chromeos.audits.num-derive]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.3"
|
||||
|
||||
[[audits.chromeos.audits.num-traits]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.14"
|
||||
|
||||
[[audits.chromeos.audits.num_cpus]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.13.0"
|
||||
|
||||
[[audits.chromeos.audits.once_cell]]
|
||||
who = "crosvm"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.17.0"
|
||||
|
||||
[[audits.chromeos.audits.os_str_bytes]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "6.3.0"
|
||||
|
||||
[[audits.chromeos.audits.owning_ref]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.4.1"
|
||||
|
||||
[[audits.chromeos.audits.parking_lot]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.11.1"
|
||||
|
||||
[[audits.chromeos.audits.parking_lot_core]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.8.3"
|
||||
|
||||
[[audits.chromeos.audits.paste]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.4"
|
||||
|
||||
[[audits.chromeos.audits.peeking_take_while]]
|
||||
who = "George Burgess IV <gbiv@google.com>"
|
||||
criteria = "does-not-implement-crypto"
|
||||
version = "0.1.2"
|
||||
|
||||
[[audits.chromeos.audits.peeking_take_while]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.2"
|
||||
|
||||
[[audits.chromeos.audits.percent-encoding]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "2.2.0"
|
||||
|
||||
[[audits.chromeos.audits.pin-project]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.12"
|
||||
|
||||
[[audits.chromeos.audits.pin-project-internal]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.12"
|
||||
|
||||
[[audits.chromeos.audits.pin-project-lite]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.4"
|
||||
|
||||
[[audits.chromeos.audits.pin-project-lite]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.9"
|
||||
|
||||
[[audits.chromeos.audits.pin-utils]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.0"
|
||||
|
||||
[[audits.chromeos.audits.ppv-lite86]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.10"
|
||||
|
||||
[[audits.chromeos.audits.proc-macro-hack]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.5.19"
|
||||
|
||||
[[audits.chromeos.audits.proc-macro2]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.26"
|
||||
|
||||
[[audits.chromeos.audits.proc-macro2]]
|
||||
who = "Chrome OS Toolchain"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.29"
|
||||
|
||||
[[audits.chromeos.audits.proc-macro2]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.0.49"
|
||||
|
||||
[[audits.chromeos.audits.prost]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.11.0"
|
||||
|
||||
[[audits.chromeos.audits.prost-derive]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.11.0"
|
||||
|
||||
[[audits.chromeos.audits.quote]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.9"
|
||||
|
||||
[[audits.chromeos.audits.quote]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.0.23"
|
||||
|
||||
[[audits.chromeos.audits.rand]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.8.3"
|
||||
|
||||
[[audits.chromeos.audits.rand_chacha]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.0"
|
||||
|
||||
[[audits.chromeos.audits.rand_chacha]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.1"
|
||||
|
||||
[[audits.chromeos.audits.rand_core]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.6.1"
|
||||
|
||||
[[audits.chromeos.audits.rand_core]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.6.4"
|
||||
|
||||
[[audits.chromeos.audits.regex]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.5.4"
|
||||
|
||||
[[audits.chromeos.audits.regex-syntax]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.6.25"
|
||||
|
||||
[[audits.chromeos.audits.rustc-demangle]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.18"
|
||||
|
||||
[[audits.chromeos.audits.rustc-hash]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.1.0"
|
||||
|
||||
[[audits.chromeos.audits.ryu]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.5"
|
||||
|
||||
[[audits.chromeos.audits.same-file]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.6"
|
||||
|
||||
[[audits.chromeos.audits.scopeguard]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.1.0"
|
||||
|
||||
[[audits.chromeos.audits.serde]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.126"
|
||||
|
||||
[[audits.chromeos.audits.serde]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.0.152"
|
||||
|
||||
[[audits.chromeos.audits.serde_derive]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.0.152"
|
||||
|
||||
[[audits.chromeos.audits.serde_json]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.64"
|
||||
|
||||
[[audits.chromeos.audits.serde_urlencoded]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.7.1"
|
||||
|
||||
[[audits.chromeos.audits.shlex]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.1"
|
||||
|
||||
[[audits.chromeos.audits.shlex]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.0"
|
||||
|
||||
[[audits.chromeos.audits.slab]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.4.2"
|
||||
|
||||
[[audits.chromeos.audits.slab]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.4.7"
|
||||
|
||||
[[audits.chromeos.audits.smallvec]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.6.1"
|
||||
|
||||
[[audits.chromeos.audits.static_assertions]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.1.0"
|
||||
|
||||
[[audits.chromeos.audits.syn]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.69"
|
||||
|
||||
[[audits.chromeos.audits.syn]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.80"
|
||||
|
||||
[[audits.chromeos.audits.syn]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.0.107"
|
||||
|
||||
[[audits.chromeos.audits.termcolor]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.1.2"
|
||||
|
||||
[[audits.chromeos.audits.textwrap]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.11.0"
|
||||
|
||||
[[audits.chromeos.audits.textwrap]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.15.1"
|
||||
|
||||
[[audits.chromeos.audits.textwrap]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "0.15.2"
|
||||
|
||||
[[audits.chromeos.audits.thiserror]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.23"
|
||||
|
||||
[[audits.chromeos.audits.thiserror-impl]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.0.23"
|
||||
|
||||
[[audits.chromeos.audits.tokio]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.2.0"
|
||||
|
||||
[[audits.chromeos.audits.tokio-macros]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.1.0"
|
||||
|
||||
[[audits.chromeos.audits.tokio-stream]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.3"
|
||||
|
||||
[[audits.chromeos.audits.tokio-util]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.7.3"
|
||||
|
||||
[[audits.chromeos.audits.tower-service]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.2"
|
||||
|
||||
[[audits.chromeos.audits.tracing]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.35"
|
||||
|
||||
[[audits.chromeos.audits.tracing-attributes]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.22"
|
||||
|
||||
[[audits.chromeos.audits.tracing-core]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.29"
|
||||
|
||||
[[audits.chromeos.audits.try-lock]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.3"
|
||||
|
||||
[[audits.chromeos.audits.unicode-ident]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.0.6"
|
||||
|
||||
[[audits.chromeos.audits.unicode-segmentation]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "1.7.1"
|
||||
|
||||
[[audits.chromeos.audits.unicode-segmentation]]
|
||||
who = "ChromeOS"
|
||||
criteria = ["safe-to-run", "does-not-implement-crypto"]
|
||||
version = "1.8.0"
|
||||
|
||||
[[audits.chromeos.audits.unicode-width]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.1.8"
|
||||
|
||||
[[audits.chromeos.audits.unicode-xid]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.2.1"
|
||||
|
||||
[[audits.chromeos.audits.walkdir]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "2.3.1"
|
||||
|
||||
[[audits.chromeos.audits.walkdir]]
|
||||
who = "Android Legacy"
|
||||
criteria = "safe-to-run"
|
||||
version = "2.3.2"
|
||||
|
||||
[[audits.chromeos.audits.want]]
|
||||
who = "ChromeOS"
|
||||
criteria = "safe-to-run"
|
||||
version = "0.3.0"
|
||||
|
||||
[[audits.embark.audits.anyhow]]
|
||||
who = "Johan Andersson <opensource@embark-studios.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
|
|
|
|||
Загрузка…
Ссылка в новой задаче