Bug 1787306 — Add Embark Studios as a trusted import for audits. r=supply-chain-reviewers,nika

Differential Revision: https://phabricator.services.mozilla.com/D155638

supply-chain/config.toml

@@ -4,6 +4,9 @@
 [imports.bytecodealliance]
 url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
 
+[imports.embark]
+url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
+
 [policy.async-task]
 audit-as-crates-io = true
 notes = "This is the upstream code plus an extra fix that hasn't been released yet, see bug 1746533."
@@ -432,10 +435,6 @@ criteria = "safe-to-deploy"
 version = "0.6.0"
 criteria = "safe-to-deploy"
 
-[[exemptions.cty]]
-version = "0.2.2"
-criteria = "safe-to-deploy"
-
 [[exemptions.cubeb]]
 version = "0.10.0"
 criteria = "safe-to-deploy"

supply-chain/imports.lock

@@ -118,3 +118,24 @@ criteria = "safe-to-deploy"
 version = "46.0.0"
 notes = "The Bytecode Alliance is the author of this crate."
 
+[[audits.embark.audits.anyhow]]
+who = "Johan Andersson <johan@embark-studios.com>"
+criteria = "safe-to-deploy"
+version = "1.0.58"
+
+[[audits.embark.audits.cty]]
+who = "Johan Andersson <johan@embark-studios.com>"
+criteria = "safe-to-deploy"
+version = "0.2.2"
+notes = "Inspected it and is a tiny crate with just type definitions"
+
+[[audits.embark.audits.serial_test]]
+who = "Johan Andersson <johan@embark-studios.com>"
+criteria = "safe-to-run"
+version = "0.6.0"
+
+[[audits.embark.audits.serial_test_derive]]
+who = "Johan Andersson <johan@embark-studios.com>"
+criteria = "safe-to-run"
+version = "0.6.0"
+