diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index 2772ccb..9d053b0 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -2,3 +2,81 @@ # cargo-vet audits file [audits] + +[[trusted.forensic-carve]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-07-23" +end = "2027-08-01" + +[[trusted.forensicnomicon]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-05" +end = "2027-08-01" + +[[trusted.forensicnomicon-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-28" +end = "2027-08-01" + +[[trusted.forensicnomicon-data]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-28" +end = "2027-08-01" + +[[trusted.jsonguard]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-05-21" +end = "2027-08-01" + +[[trusted.lzo]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-07" +end = "2027-08-01" + +[[trusted.prefetch-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-12" +end = "2027-08-01" + +[[trusted.shellitem]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-13" +end = "2027-08-01" + +[[trusted.winevt-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-15" +end = "2027-08-01" + +[[trusted.winreg-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-13" +end = "2027-08-01" + +[[trusted.winreg-format]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-13" +end = "2027-08-01" + +[[trusted.xpress-huffman]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-12" +end = "2027-08-01" + +[[trusted.zip-forensic-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-29" +end = "2027-08-01" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 504fb79..75cfe6e 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -19,6 +19,9 @@ url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml" [policy.mem4n6] audit-as-crates-io = false +[policy.memf-carve] +audit-as-crates-io = false + [policy.memf-core] audit-as-crates-io = false @@ -43,9 +46,6 @@ audit-as-crates-io = false [policy.memf-windows] audit-as-crates-io = false -[policy.memf-carve] -audit-as-crates-io = false - [[exemptions.aead]] version = "0.5.2" criteria = "safe-to-deploy" @@ -406,22 +406,6 @@ criteria = "safe-to-run" version = "0.3.3" criteria = "safe-to-deploy" -[[exemptions.forensic-carve]] -version = "0.1.0" -criteria = "safe-to-deploy" - -[[exemptions.forensicnomicon]] -version = "1.8.1" -criteria = "safe-to-deploy" - -[[exemptions.forensicnomicon-core]] -version = "1.4.0" -criteria = "safe-to-deploy" - -[[exemptions.forensicnomicon-data]] -version = "1.3.2" -criteria = "safe-to-deploy" - [[exemptions.fs4]] version = "0.6.6" criteria = "safe-to-deploy" @@ -566,10 +550,6 @@ criteria = "safe-to-deploy" version = "0.3.103" criteria = "safe-to-deploy" -[[exemptions.jsonguard]] -version = "0.2.3" -criteria = "safe-to-deploy" - [[exemptions.leb128]] version = "0.2.7" criteria = "safe-to-deploy" @@ -638,10 +618,6 @@ criteria = "safe-to-deploy" version = "0.1.7" criteria = "safe-to-deploy" -[[exemptions.lzo]] -version = "0.1.1" -criteria = "safe-to-deploy" - [[exemptions.lzo1x]] version = "0.2.2" criteria = "safe-to-run" @@ -794,10 +770,6 @@ criteria = "safe-to-deploy" version = "0.2.21" criteria = "safe-to-deploy" -[[exemptions.prefetch-core]] -version = "0.1.0" -criteria = "safe-to-deploy" - [[exemptions.primeorder]] version = "0.13.6" criteria = "safe-to-deploy" @@ -982,10 +954,6 @@ criteria = "safe-to-deploy" version = "0.10.9" criteria = "safe-to-deploy" -[[exemptions.shellitem]] -version = "0.2.0" -criteria = "safe-to-deploy" - [[exemptions.shlex]] version = "2.0.1" criteria = "safe-to-deploy" @@ -1338,18 +1306,6 @@ criteria = "safe-to-deploy" version = "0.52.6" criteria = "safe-to-deploy" -[[exemptions.winevt-core]] -version = "0.3.0" -criteria = "safe-to-deploy" - -[[exemptions.winreg-core]] -version = "0.1.1" -criteria = "safe-to-deploy" - -[[exemptions.winreg-format]] -version = "0.1.0" -criteria = "safe-to-deploy" - [[exemptions.wyz]] version = "0.5.1" criteria = "safe-to-deploy" @@ -1358,10 +1314,6 @@ criteria = "safe-to-deploy" version = "0.16.0" criteria = "safe-to-deploy" -[[exemptions.xpress-huffman]] -version = "0.1.0" -criteria = "safe-to-deploy" - [[exemptions.yansi]] version = "1.0.1" criteria = "safe-to-deploy" @@ -1394,10 +1346,6 @@ criteria = "safe-to-deploy" version = "1.9.0" criteria = "safe-to-deploy" -[[exemptions.zip-forensic-core]] -version = "0.1.0" -criteria = "safe-to-deploy" - [[exemptions.zmij]] version = "1.0.23" criteria = "safe-to-deploy" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 09b89d6..09712af 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -76,6 +76,55 @@ user-id = 696 user-login = "fitzgen" user-name = "Nick Fitzgerald" +[[publisher.forensic-carve]] +version = "0.1.0" +when = "2026-07-23" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.forensicnomicon]] +version = "1.8.1" +when = "2026-07-19" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.forensicnomicon-core]] +version = "1.4.0" +when = "2026-07-19" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.forensicnomicon-data]] +version = "1.3.2" +when = "2026-07-19" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.jsonguard]] +version = "0.2.3" +when = "2026-06-14" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.lzo]] +version = "0.1.1" +when = "2026-06-07" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.prefetch-core]] +version = "0.1.0" +when = "2026-06-12" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + [[publisher.pulley-interpreter]] version = "26.0.1" when = "2024-11-05" @@ -89,6 +138,13 @@ user-id = 187138 user-login = "elliottt" user-name = "Trevor Elliott" +[[publisher.shellitem]] +version = "0.2.0" +when = "2026-06-28" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + [[publisher.unicode-segmentation]] version = "1.13.3" when = "2026-06-01" @@ -201,12 +257,47 @@ when = "2024-11-05" user-id = 73222 user-login = "wasmtime-publish" +[[publisher.winevt-core]] +version = "0.3.0" +when = "2026-06-28" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.winreg-core]] +version = "0.1.1" +when = "2026-06-24" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.winreg-format]] +version = "0.1.0" +when = "2026-06-13" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + [[publisher.wit-parser]] version = "0.218.1" when = "2025-02-05" user-id = 73222 user-login = "wasmtime-publish" +[[publisher.xpress-huffman]] +version = "0.1.0" +when = "2026-06-12" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + +[[publisher.zip-forensic-core]] +version = "0.1.0" +when = "2026-06-29" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + [[audits.bytecode-alliance.wildcard-audits.arbitrary]] who = "Nick Fitzgerald " criteria = "safe-to-deploy"