Skip to content

fix(deps): clear five RustSec advisories (webpki, wasmtime, p256 0.14 for crypto-bigint) #480

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
TAIPANBOX merged 4 commits into from
Oct 26, 2026
Merged

fix(deps): clear five RustSec advisories (webpki, wasmtime, p256 0.14 for crypto-bigint) #480

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
45f1e19
fix(deps): patch rustls-webpki, webpki-roots and wasmtime for four ad…
claude Oct 26, 2026
b6a35ff
fix(deps): move p256 to 0.14, dropping crypto-bigint 0.5.5 (RUSTSEC-2…
claude Oct 26, 2026
b7218da
test(crypto): pin the P-256 wire bytes to RFC 6979's published vector
claude Oct 26, 2026
fb39712
test(crypto): allow-list the RFC 6979 test key for the secret scan
claude Oct 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .secretscan-allow
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
# Exceptions for the estate secret scan (estate-gates invariant 23). Each
# names a fingerprint and a path, never a value, and says why it is not a secret.
33ea101ddbe7c33b crates/cloud/src/audit_sign.rs # a PEM header around deliberate garbage, in the test that the parser rejects it
3021d90eb9437b2d crates/cloud/src/audit_sign.rs # RFC 6979 appendix A.2.5's published P-256 test key in PKCS#8 form, in the test that every accepted key encoding loads; a public test vector that signs nothing
3021d90eb9437b2d crates/cloud/tests/it/oidc.rs # an RSA key generated for the OIDC integration tests; it signs nothing outside them
743554670c6065b3 crates/core/src/dlp.rs # the DLP detector's own fixture: an AWS key id shape it must catch and redact
743554670c6065b3 crates/core/src/injection.rs # the injection redactor tests feed the DLP fixture shapes
Expand Down
Loading
Loading