action-trust-layers/Cargo.toml at main · hyperpolymath/action-trust-layers · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
# SPDX-License-Identifier: MPL-2.0
[package]
name = "action-trust-layers"
version = "0.0.0"
edition = "2021"
description = "Layered DANE/TLSA-inspired trust evaluation for CI (GitHub Actions) supply-chain pinning"
license = "MPL-2.0"
repository = "https://github.com/hyperpolymath/action-trust-layers"

[[bin]]
name = "atl"
path = "src/main.rs"

[dependencies]
anyhow = "1"
clap = { version = "4", features = ["derive"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
serde_yaml = "0.9"
toml = "0.8"
ureq = "2"

[profile.release]
strip = true
lto = true