Cross builds, packaging split, CI, fuzzing, supply-chain policy

Browse Source

build.sh builds the Rust targets with the Go-era names, refuses an OUT
that is /, $HOME or the tree, checks static linking and names the Go
targets Rust cannot build. packaging/package.sh builds and inspects
packages without signing or publishing; repo.sh reuses it. Seven fuzz
targets (one found a URL-parser panic, fixed here with a regression
test), cargo-deny policy, CI for lint, tests on Linux/macOS/Windows,
cross builds with qemu runs, supply chain and fuzzing. Compatibility
specification and security notes.

Co-Authored-By: Claude <noreply@anthropic.com>

...

This commit is contained in:

Andy Dixon

2026-10-08 11:44:23 +01:00

co-authored by Claude

parent a98931779a

commit cddde5ca52

27 changed files with 2347 additions and 114 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

fuzz/Cargo.lock

Generated

+1283

File diff suppressed because it is too large Load Diff