mirror of
https://github.com/ruvnet/RuVector.git
synced 2026-08-06 23:34:11 +00:00
c410250467
* fix ruvector MCP startup and harden release * chore: normalize ruvector package metadata * fix ruvector HNSW defaults and CI gates * fix clean ruvector artifact tests
220 lines
11 KiB
TOML
220 lines
11 KiB
TOML
# cargo-deny configuration — supply-chain policy for the ruvector
|
|
# workspace. See the supply-chain CI workflow (`.github/workflows/
|
|
# supply-chain.yml`) for how this gets enforced on every PR + on a
|
|
# weekly scheduled scan.
|
|
#
|
|
# Run locally:
|
|
# cargo install --locked cargo-deny
|
|
# cargo deny check
|
|
#
|
|
# Four sub-checks run: advisories, bans, licenses, sources.
|
|
# Each fails the run independently; together they form the crate-graph
|
|
# half of our supply-chain defence (npm side is in the same workflow).
|
|
|
|
[graph]
|
|
# Sensible target set so we don't pull in checks for triples we never
|
|
# build day-to-day. wasm32-unknown-unknown is gated per-crate by the
|
|
# `wasm` features and gets its own checks in the wasm CI jobs.
|
|
targets = [
|
|
{ triple = "x86_64-unknown-linux-gnu" },
|
|
{ triple = "aarch64-unknown-linux-gnu" },
|
|
{ triple = "x86_64-apple-darwin" },
|
|
{ triple = "aarch64-apple-darwin" },
|
|
]
|
|
|
|
# ─────────────────────────────────────────────────────────────────────
|
|
# 1) advisories — RustSec DB scan
|
|
# ─────────────────────────────────────────────────────────────────────
|
|
[advisories]
|
|
db-urls = ["https://github.com/RustSec/advisory-db"]
|
|
version = 2
|
|
|
|
# Surface yanked crates as warnings. Promote to `deny` once we've
|
|
# migrated off whichever transitive holds the yanked version.
|
|
yanked = "warn"
|
|
|
|
# Whitelist specific RUSTSEC IDs with justification + re-review date.
|
|
# Every entry MUST carry a justification and an explicit re-review
|
|
# date — we revisit on each minor release at minimum. Dependabot will
|
|
# auto-resolve most of these as upstreams publish fixes; this list is
|
|
# meant to shrink over time.
|
|
ignore = [
|
|
# ── Real vulnerabilities (need active migration path) ────────────
|
|
|
|
# rsa 0.9.x — Marvin Attack timing sidechannel (RUSTSEC-2023-0071).
|
|
# No patched version exists; the RustCrypto/RSA team is rewriting
|
|
# to constant-time. Used by `ruvector-kalshi` for Kalshi exchange
|
|
# API signing (RSA-PSS-SHA256, mandated by the exchange). Mitigation
|
|
# per the advisory: "local use on a non-compromised computer is
|
|
# fine" — we sign locally and an attacker would need to observe
|
|
# sub-ms timing across many requests through the network response
|
|
# timing to recover the key. Risk is acceptable for trading-bot
|
|
# use; re-review on 2026-08-01 or when `rsa 0.10` ships with the
|
|
# constant-time fix (track: https://github.com/RustCrypto/RSA/issues/626).
|
|
"RUSTSEC-2023-0071",
|
|
|
|
# NOTE: quick-xml 0.26.0's two DoS advisories (RUSTSEC-2026-0194,
|
|
# RUSTSEC-2026-0195, transitive via inferno <- pprof's optional
|
|
# `profiling` feature) are ignored in `.cargo/audit.toml` instead of
|
|
# here — `cargo deny check` doesn't enable that optional feature
|
|
# during resolution and never encounters the advisory, so an ignore
|
|
# entry here would just be permanent dead-warning noise.
|
|
|
|
# ── Unmaintained transitive deps (informational, no CVE) ─────────
|
|
|
|
# proc-macro-error 1.x — unmaintained, transitively required by
|
|
# several proc-macro deps (clap-derive ecosystem). 2.x is API
|
|
# incompatible. Dependabot tracking. Re-review on 2026-07-01.
|
|
"RUSTSEC-2024-0370",
|
|
|
|
# proc-macro-error2 — the (also now unmaintained) fork of the above,
|
|
# pulled transitively via validator_derive -> validator (ruvector-scipix
|
|
# example). Same crate family as RUSTSEC-2024-0370, no maintained
|
|
# successor yet. Informational. Re-review on 2026-07-01.
|
|
"RUSTSEC-2026-0173",
|
|
|
|
# number_prefix — unmaintained, used transitively by indicatif. No
|
|
# known successor; indicatif itself is still maintained. Informational.
|
|
"RUSTSEC-2025-0119",
|
|
|
|
# paste 1.0.x — archived upstream 2024-10. Pulled transitively via
|
|
# nalgebra/simba and several proc-macro deps. No vulnerability,
|
|
# just informational. Re-review on 2026-08-01.
|
|
"RUSTSEC-2024-0436",
|
|
|
|
# bincode 1.x — unmaintained, 2.x is API-incompatible. Multiple
|
|
# call sites across rvf + serialization layers; migration queued.
|
|
# Re-review on 2026-07-01.
|
|
"RUSTSEC-2025-0141",
|
|
|
|
# instant 0.1.x — unmaintained. Transitive via async-std / wasm
|
|
# adapters. Replacement is `web-time` but several transitives still
|
|
# pin instant directly. Re-review on 2026-07-15.
|
|
"RUSTSEC-2024-0384",
|
|
|
|
# rusttype 0.9.3 — unmaintained (RUSTSEC-2021-0140). Direct dep of
|
|
# the `ruvector-scipix` example crate (not a crates.io-published
|
|
# member); not exercised outside offline image-processing demos.
|
|
# No safe upgrade available. Re-review 2026-08-01.
|
|
#
|
|
# NOTE: this ID and RUSTSEC-2025-0124 below were previously swapped
|
|
# between each other (and RUSTSEC-2026-0105 mislabeled "rusttype")
|
|
# in this file — corrected against the authoritative advisory-db
|
|
# `package` field. The IDs themselves were always right; only the
|
|
# human-readable comments were crossed.
|
|
"RUSTSEC-2021-0140",
|
|
|
|
# rand_os 0.x — unmaintained, replaced by getrandom. Transitive via
|
|
# legacy rand internals; modern paths use getrandom directly.
|
|
"RUSTSEC-2025-0124",
|
|
|
|
# rustls-pemfile 1.x — unmaintained, replaced by rustls-pki-types'
|
|
# builtin PEM parser. Transitive via reqwest / tokio-tungstenite.
|
|
# Migration is a transitive bump; Dependabot tracking.
|
|
"RUSTSEC-2025-0134",
|
|
|
|
# ttf-parser — unmaintained (RUSTSEC-2026-0192), "no safe upgrade
|
|
# available" per the advisory itself. Pulled via three unrelated
|
|
# chains, each in a different resolved version: rusttype 0.9.3 ->
|
|
# owned_ttf_parser 0.15.2 (ruvector-scipix example), ab_glyph 0.2.32
|
|
# -> owned_ttf_parser 0.25.1 -> imageproc -> ruvector-scipix
|
|
# example, and plotters 0.3.7 (crates/ruvector-bench chart
|
|
# rendering, dev-only). All three consumer paths are example/bench
|
|
# code, never reachable via untrusted input. Re-review 2026-08-01.
|
|
"RUSTSEC-2026-0192",
|
|
|
|
]
|
|
|
|
# ─────────────────────────────────────────────────────────────────────
|
|
# 2) bans — explicit crate-name allow/block list
|
|
# ─────────────────────────────────────────────────────────────────────
|
|
[bans]
|
|
# 136-member workspace pulls both Tokio and async-std families,
|
|
# producing legitimate version skew (e.g. nalgebra 0.32 vs 0.33 across
|
|
# linear-algebra crates). Track for cleanup but `warn`, not `deny`.
|
|
multiple-versions = "warn"
|
|
|
|
# Refuse `version = "*"` for crates.io deps in any of our Cargo.tomls
|
|
# — that's how typosquatting + accidental floats land malicious
|
|
# versions. Demoted to `warn` for now because several internal/path
|
|
# wildcards exist in the mcp-brain + consciousness experiment crates
|
|
# (those use `workspace = "*"` for path-only deps which cargo-deny
|
|
# can't always distinguish from registry wildcards). Tracked for
|
|
# tightening to `deny` once those are migrated to explicit version
|
|
# constraints. Re-review on 2026-08-01.
|
|
wildcards = "warn"
|
|
|
|
# Highlight transitively-pulled-in deep deps so reviewers can audit
|
|
# tree growth without explicit blessing.
|
|
highlight = "all"
|
|
|
|
# Concretely forbidden crates — empty for now. Use this slot to
|
|
# quickly block a compromised package mid-flight without editing the
|
|
# workflow.
|
|
deny = []
|
|
|
|
# Allow internal workspace path deps to use `version = "*"` until the
|
|
# tighten-up pass lands. Listed crates have been audited as path-only.
|
|
allow-wildcard-paths = true
|
|
|
|
# ─────────────────────────────────────────────────────────────────────
|
|
# 3) licenses — what we'll allow in the graph
|
|
# ─────────────────────────────────────────────────────────────────────
|
|
[licenses]
|
|
version = 2
|
|
|
|
# Matches `actions/dependency-review-action`'s allow-list in the
|
|
# supply-chain workflow so the two checks agree.
|
|
#
|
|
# Additions vs sublinear-time-solver's allowlist:
|
|
# * BSL-1.0 — Boost Software License (xxhash-rust transitive
|
|
# via rvf-wire → mcp-brain-server + benchmarks)
|
|
# * CDLA-Permissive-2.0 — used by tch-rs / onnxruntime style deps
|
|
# * NCSA — University of Illinois/NCSA Open Source
|
|
# License (LLVM family deps)
|
|
allow = [
|
|
"MIT",
|
|
"Apache-2.0",
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"BSD-2-Clause",
|
|
"BSD-3-Clause",
|
|
"ISC",
|
|
"Unicode-DFS-2016",
|
|
"Unicode-3.0",
|
|
"MPL-2.0",
|
|
"Zlib",
|
|
"CC0-1.0",
|
|
"BSL-1.0",
|
|
"CDLA-Permissive-2.0",
|
|
"NCSA",
|
|
]
|
|
|
|
confidence-threshold = 0.8
|
|
exceptions = []
|
|
|
|
# Workspace-internal crates without `license = "..."` set are research
|
|
# / examples crates with `publish = false`. Ignore them rather than
|
|
# failing the run — they're never shipped to crates.io. If one is ever
|
|
# flipped to `publish = true`, the publish flow's `cargo publish` step
|
|
# will refuse it without an explicit license, so this is safe.
|
|
private = { ignore = true }
|
|
|
|
# ─────────────────────────────────────────────────────────────────────
|
|
# 4) sources — which registries / git remotes the graph can pull from
|
|
# ─────────────────────────────────────────────────────────────────────
|
|
[sources]
|
|
# Default: only the official crates.io registry. Anything else (private
|
|
# mirror, git dep) must be explicitly allowed.
|
|
unknown-registry = "deny"
|
|
# `warn` instead of `deny` for ruvector because the workspace pulls
|
|
# several legitimate git deps (vendored hailo bindings, in-flight
|
|
# upstream fixes pinned to commits). Promote to `deny` once those
|
|
# have crates.io releases. Each unknown-git appearance shows up in
|
|
# the CI log so reviewers can challenge it on a per-PR basis.
|
|
unknown-git = "warn"
|
|
|
|
# Allow-list for git remotes — populated on demand. If a future PR
|
|
# needs a git dep, this is where the reviewer adds it with a
|
|
# justification comment.
|
|
allow-git = []
|
|
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|