sigstore-rust/Cargo.toml at 6d915a2cbf8963eb296865e26172ad3fd9ebe1a1 · sigstore/sigstore-rust · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
[workspace]
resolver = "2"
members = [
    "crates/sigstore-types",
    "crates/sigstore-crypto",
    "crates/sigstore-merkle",
    "crates/sigstore-tsa",
    "crates/sigstore-trust-root",
    "crates/sigstore-bundle",
    "crates/sigstore-cache",
    "crates/sigstore-rekor",
    "crates/sigstore-fulcio",
    "crates/sigstore-oidc",
    "crates/sigstore-verify",
    "crates/sigstore-sign",
    "crates/sigstore-conformance",
]

[workspace.package]
version = "0.4.0"
edition = "2021"
license = "BSD-3-Clause"
repository = "https://github.com/sigstore/sigultimate"
rust-version = "1.70"

[workspace.dependencies]
# Serialization
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
base64 = "0.22"

# Error handling
thiserror = "2.0"

# Cryptography
aws-lc-rs = "1.15"
sha2 = "0.10"
digest = "0.10"
signature = "2.2"
rand_core = { version = "0.9.3" }
rand = "0.9.2"

# ASN.1 / X.509
der = { version = "0.7", features = ["alloc", "derive", "oid"] }
pem = { version = "3.0" }
spki = { version = "0.7", features = ["alloc"] }
# To upgrade `const-oid`, first `spki` needs to be upgraded
const-oid = "0.9"
x509-cert = { version = "0.2", features = ["builder", "sct"] }
tls_codec = { version = "0.4", default-features = false, features = ["derive"] }

# RFC 3161 timestamp verification
cms = { version = "0.2", default-features = false }
x509-tsp = { version = "0.1", default-features = false }
cmpv2 = { version = "0.2", default-features = false }
rustls-webpki = { version = "0.103", default-features = false, features = ["alloc", "std", "aws-lc-rs"] }
rustls-pki-types = { version = "1.13", default-features = false, features = ["alloc"] }

# HTTP
reqwest = { version = "0.12", default-features = false, features = ["json"] }
url = "2.5"

# Async
tokio = { version = "1.47", features = ["full"] }

# Time
chrono = { version = "0.4", features = ["serde"] }

# Testing
hex = "0.4"
rstest = { version = "0.26", default-features = false }

# Logging
tracing = { version = "0.1" }

# Serialization / JSON
serde_json_canonicalizer = "0.3"

# TUF / Package management
tough = { version = "0.21", features = ["http"] }

# Async utilities
futures = "0.3"

# Directory utilities
directories = "6.0"

# Internal crates (path + version for publishing)
sigstore-types = { path = "crates/sigstore-types", version = "0.4.0" }
sigstore-crypto = { path = "crates/sigstore-crypto", version = "0.4.0" }
sigstore-merkle = { path = "crates/sigstore-merkle", version = "0.4.0" }
sigstore-tsa = { path = "crates/sigstore-tsa", version = "0.4.0" }
sigstore-trust-root = { path = "crates/sigstore-trust-root", version = "0.4.0" }
sigstore-bundle = { path = "crates/sigstore-bundle", version = "0.4.0" }
sigstore-rekor = { path = "crates/sigstore-rekor", version = "0.4.0" }
sigstore-fulcio = { path = "crates/sigstore-fulcio", version = "0.4.0" }
sigstore-oidc = { path = "crates/sigstore-oidc", version = "0.4.0" }
sigstore-cache = { path = "crates/sigstore-cache", version = "0.4.0" }
sigstore-verify = { path = "crates/sigstore-verify", version = "0.4.0" }
sigstore-sign = { path = "crates/sigstore-sign", version = "0.4.0" }