airs-cli 0.8.0

Native Rust CLI for Prisma AIRS (executable airs-cli-rs until 1.0), built on the scm-sdk crate
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87

[workspace]
members = [".", "crates/airs-test-harness"]
resolver = "3"

[workspace.package]
edition = "2024"
rust-version = "1.89"
license = "Apache-2.0"
repository = "https://git.cdot.io/cdot/prisma-airs-cli-rs"
authors = ["Calvin Remsburg"]

[workspace.lints.rust]
unsafe_code = "forbid"

[workspace.lints.clippy]
all = { level = "warn", priority = -1 }

[package]
# The crate is `airs-cli`; the executable stays `airs-cli-rs` until 1.0 (MILESTONES).
name = "airs-cli"
version = "0.8.0"
description = "Native Rust CLI for Prisma AIRS (executable airs-cli-rs until 1.0), built on the scm-sdk crate"
edition.workspace = true
rust-version.workspace = true
license.workspace = true
repository.workspace = true
authors.workspace = true
readme = "README.md"
keywords = ["prisma-airs", "ai-security", "cli", "paloaltonetworks"]
categories = ["command-line-utilities"]
# Only what builds the executable; tests, fixtures, docs and CI stay in the repository.
include = ["/src/**/*.rs", "/Cargo.toml", "/Cargo.lock", "/README.md", "/LICENSE"]
default-run = "airs-cli-rs"

[[bin]]
name = "airs-cli-rs"
path = "src/main.rs"

[lib]
name = "airs_cli_rs"
path = "src/lib.rs"

[dependencies]
# Published SDK (crates.io scm-sdk 0.1.1).
# Exact pin: the CLI is qualified against this release only.
scm = { package = "scm-sdk", version = "=0.1.1", default-features = false, features = ["reqwest-transport", "scan", "management", "red-team", "dlp", "model-security"] }
clap = { version = "4.5", features = ["derive"] }
# The direct (never proxied) transport for plain-http loopback endpoints (src/clients.rs).
# Same version and a subset of the features scm-sdk already enables, so feature
# unification changes nothing in the SDK's own transport.
reqwest = { version = "=0.13.5", default-features = false, features = ["http2", "gzip", "stream"] }
futures-util = { version = "0.3", default-features = false, features = ["alloc"] }
# gunzip of the pinned uv archive (`model-security install --fetch-uv`, DESIGN §17.14,
# choice 35). Already in the lock file through reqwest's gzip; the tar reader is our own.
flate2 = { version = "=1.1.10", default-features = false, features = ["rust_backend"] }
# ECMAScript `Number::toString` for every printed number (DESIGN §2.7); already in the
# lock file through scm-sdk.
ryu-js = "=1.0.3"
# The tenant store (DESIGN §3, §11): `flock`, `O_NOFOLLOW` opens, `fstat`, `uname`,
# `geteuid` and termios without `unsafe`. Already in the lock file through tempfile.
rustix = { version = "=1.1.5", features = ["fs", "termios", "system", "process"] }
serde = { version = "1.0", features = ["derive"] }
# The environment report's Content-Security-Policy hashes (DESIGN §15.17). Already in the
# lock file through scm-sdk, with the same features.
sha2 = { version = "=0.10.9", default-features = false }
# Never enable `preserve_order`: feature unification would change SDK wire bytes.
serde_json = "1.0"
tokio = { version = "1.50", features = ["rt", "macros", "signal", "time", "sync"] }
# Parse-only TOML for the tenant store (DESIGN §3.2, §3.3); the writers are our own, so
# no `display` feature, and `preserve_order` stays off.
toml = { version = "=1.1.2", default-features = false, features = ["std", "serde", "parse"] }
# Display width for table padding (UAX #11, DESIGN §2.7, D53).
unicode-width = "0.2"
url = "2.5"
uuid = { version = "1", features = ["v4"] }

[dev-dependencies]
airs-test-harness = { path = "crates/airs-test-harness" }
serde_json = "1.0"

[lints]
workspace = true

[profile.release]
lto = "thin"
codegen-units = 1
strip = "symbols"