Sharang ParnerkarandClaude Fable 5
b5c33bdd52
CI / Check (push) Skipped
CI / Detect Changes (pull_request) Skipped
CI / Deploy Agent (pull_request) Skipped
CI / Deploy Dashboard (pull_request) Skipped
CI / Deploy Docs (pull_request) Skipped
CI / Deploy MCP (pull_request) Skipped
CI / Check (pull_request) Failing after 6m53s
The private git-dependency still pointed at ssh://git@gitea.meghsakha.com:22222/sharang/tramiton.git, which is stale two ways: #231 repointed the host to git.breakpilot.com, and the repo was renamed tramiton -> firmwerk. The CI `insteadOf` rewrite is keyed on git.breakpilot.com, so it never matched the old host and Cargo fell back to a raw SSH clone of a dead host -> "Host key verification failed" -> "failed to get tramiton-core as a dependency". This broke `CI / Check` and every Deploy job on main and all PRs. Repoint the three git-deps (tramiton-core/-repro/-sbom) to ssh://git@git.breakpilot.com:22222/sharang/firmwerk.git, tag unchanged (v0.4.1 = same commit ae4fc137, where the crates are still named tramiton-*), and update the matching Cargo.lock source URLs. Pure repoint — no crate rename, no code change. Migrating the deps to the firmwerk-* crates at a newer tag is a follow-up. Validated: `cargo fetch` + `cargo metadata --offline` resolve the dep from the new URL; resolved source is git+ssh://git@git.breakpilot.com:22222/sharang/firmwerk.git?tag=v0.4.1. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EgxGHn22YEfQz5fLHSHkLv
76 lines
2.9 KiB
TOML
76 lines
2.9 KiB
TOML
[package]
|
|
name = "compliance-agent"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dependencies]
|
|
compliance-core = { workspace = true, features = ["mongodb", "telemetry", "axum"] }
|
|
control-map = { workspace = true }
|
|
compliance-graph = { path = "../compliance-graph" }
|
|
compliance-dast = { path = "../compliance-dast" }
|
|
# Shared dynamic-execution logic (soft-PLC provisioning + ICS probing), also
|
|
# used by the Werkbank runner.
|
|
werkbank-exec = { path = "../werkbank-exec" }
|
|
# Native firmware build/target detection for bare-metal & RTOS artifacts.
|
|
# Same-company IP, used directly (not via CLI) so the whole tramiton suite is
|
|
# available to the onboarding classifier. Repo renamed tramiton -> firmwerk
|
|
# (git.breakpilot.com/sharang/firmwerk); crates stay tramiton-* at tag v0.4.1.
|
|
# NOTE: CI must be able to fetch this
|
|
# private repo (see the git-auth step in .gitea/workflows/ci.yml).
|
|
tramiton-core = { git = "ssh://git@git.breakpilot.com:22222/sharang/firmwerk.git", tag = "v0.4.1" }
|
|
# tramiton-repro drives the reproducible build (NixBackend seal_and_build) that
|
|
# yields a sealed lock; `libraries_from_inputs` is the analysis-only fallback.
|
|
tramiton-repro = { git = "ssh://git@git.breakpilot.com:22222/sharang/firmwerk.git", tag = "v0.4.1" }
|
|
# tramiton-sbom renders the bill of materials from a sealed lock (+ binary SCA).
|
|
tramiton-sbom = { git = "ssh://git@git.breakpilot.com:22222/sharang/firmwerk.git", tag = "v0.4.1" }
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
tokio = { workspace = true }
|
|
tracing = { workspace = true }
|
|
tracing-subscriber = { workspace = true }
|
|
chrono = { workspace = true }
|
|
mongodb = { workspace = true }
|
|
reqwest = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
sha2 = { workspace = true }
|
|
hex = { workspace = true }
|
|
uuid = { workspace = true }
|
|
secrecy = { workspace = true }
|
|
regex = { workspace = true }
|
|
axum = { version = "0.8", features = ["multipart"] }
|
|
tower-http = { version = "0.6", features = ["cors", "trace", "set-header"] }
|
|
git2 = "0.20"
|
|
octocrab = "0.44"
|
|
tokio-cron-scheduler = "0.13"
|
|
dotenvy = "0.15"
|
|
hmac = "0.12"
|
|
walkdir = "2"
|
|
# Read-only XML tree parsing for PLCopen project files (POU extraction).
|
|
roxmltree = "0.20"
|
|
base64 = "0.22"
|
|
urlencoding = "2"
|
|
futures-util = "0.3"
|
|
jsonwebtoken = "9"
|
|
zip = { workspace = true }
|
|
aes-gcm = { workspace = true }
|
|
tokio-tungstenite = { version = "0.26", features = ["rustls-tls-webpki-roots"] }
|
|
futures-core = "0.3"
|
|
dashmap = { workspace = true }
|
|
tokio-stream = { workspace = true }
|
|
rand = { workspace = true }
|
|
|
|
[dev-dependencies]
|
|
compliance-core = { workspace = true, features = ["mongodb", "axum"] }
|
|
tower = { version = "0.5", features = ["util"] }
|
|
reqwest = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
tokio = { workspace = true }
|
|
mongodb = { workspace = true }
|
|
uuid = { workspace = true }
|
|
secrecy = { workspace = true }
|
|
axum = { version = "0.8", features = ["multipart"] }
|
|
tower-http = { version = "0.6", features = ["cors"] }
|