kavach 1.0.1

Sandbox execution framework — backend abstraction, strength scoring, policy engine, credential proxy, and audit hooks
Documentation
# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
#
# When uploading crates to the registry Cargo will automatically
# "normalize" Cargo.toml files for maximal compatibility
# with all versions of Cargo and also rewrite `path` dependencies
# to registry (e.g., crates.io) dependencies.
#
# If you are reading this file be aware that the original Cargo.toml
# will likely look very different (and much more reasonable).
# See Cargo.toml.orig for the original contents.

[package]
edition = "2024"
rust-version = "1.89"
name = "kavach"
version = "1.0.1"
build = false
autolib = false
autobins = false
autoexamples = false
autotests = false
autobenches = false
description = "Sandbox execution framework — backend abstraction, strength scoring, policy engine, credential proxy, and audit hooks"
homepage = "https://github.com/MacCracken/kavach"
readme = "README.md"
keywords = [
    "sandbox",
    "security",
    "isolation",
    "container",
    "wasm",
]
categories = [
    "os",
    "web-programming",
]
license = "AGPL-3.0-only"
repository = "https://github.com/MacCracken/kavach"

[features]
attestation = ["dep:ear"]
default = ["process"]
firecracker = ["dep:tempfile"]
full = [
    "process",
    "gvisor",
    "firecracker",
    "wasm",
    "oci",
    "sgx",
    "sev",
    "sy-agnos",
]
gvisor = [
    "dep:oci-spec",
    "dep:tempfile",
]
oci = [
    "dep:oci-spec",
    "dep:tempfile",
]
process = [
    "dep:seccompiler",
    "dep:landlock",
    "dep:nix",
    "dep:caps",
    "dep:regex",
]
sev = ["dep:tempfile"]
sgx = ["dep:tempfile"]
sigstore = ["dep:sigstore"]
sy-agnos = ["dep:tempfile"]
wasm = [
    "dep:wasmtime",
    "dep:wasmtime-wasi",
]

[lib]
name = "kavach"
path = "src/lib.rs"

[[bin]]
name = "kavach"
path = "src/main.rs"

[[test]]
name = "adversarial"
path = "tests/adversarial.rs"

[[bench]]
name = "sandbox"
path = "benches/sandbox.rs"
harness = false

[dependencies.anyhow]
version = "1"

[dependencies.async-trait]
version = "0.1"

[dependencies.chrono]
version = "0.4"
features = ["serde"]

[dependencies.clap]
version = "4"
features = ["derive"]

[dependencies.ear]
version = "0.5"
optional = true

[dependencies.hmac]
version = "0.12"

[dependencies.regex]
version = "1"
optional = true

[dependencies.serde]
version = "1"
features = ["derive"]

[dependencies.serde_json]
version = "1"

[dependencies.sha2]
version = "0.10"

[dependencies.sigstore]
version = "0.13"
optional = true
default-features = false

[dependencies.thiserror]
version = "2"

[dependencies.tokio]
version = "1"
features = [
    "rt-multi-thread",
    "macros",
    "process",
    "time",
    "sync",
    "fs",
    "io-util",
    "net",
]

[dependencies.tracing]
version = "0.1"

[dependencies.uuid]
version = "1"
features = [
    "v4",
    "serde",
]

[dev-dependencies.criterion]
version = "0.5"
features = ["html_reports"]

[dev-dependencies.tempfile]
version = "3"

[dev-dependencies.tokio-test]
version = "0.4"

[target.'cfg(target_os = "linux")'.dependencies.caps]
version = "0.5"
optional = true

[target.'cfg(target_os = "linux")'.dependencies.landlock]
version = "0.4"
optional = true

[target.'cfg(target_os = "linux")'.dependencies.nix]
version = "0.29"
features = [
    "sched",
    "process",
    "signal",
    "resource",
]
optional = true

[target.'cfg(target_os = "linux")'.dependencies.oci-spec]
version = "0.7"
optional = true

[target.'cfg(target_os = "linux")'.dependencies.seccompiler]
version = "0.4"
optional = true

[target.'cfg(target_os = "linux")'.dependencies.tempfile]
version = "3"
optional = true

[target.'cfg(target_os = "linux")'.dependencies.wasmtime]
version = "42"
optional = true

[target.'cfg(target_os = "linux")'.dependencies.wasmtime-wasi]
version = "42"
optional = true

[target."cfg(unix)".dependencies.libc]
version = "0.2"