1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
[]
= ["cargo:."]
# Config for 'dist'
[]
# The preferred dist version to use in CI (Cargo.toml SemVer syntax)
= "0.32.0"
# CI backends to support
= "github"
# The installers to generate for each app. A homebrew installer would need
# a tap repository plus a HOMEBREW_TAP_TOKEN secret; shell, powershell, and
# cargo-binstall cover every platform without that infrastructure.
= ["shell", "powershell"]
# Target platforms to build apps for (Rust target-triple syntax)
= ["aarch64-apple-darwin", "aarch64-unknown-linux-gnu", "x86_64-apple-darwin", "x86_64-unknown-linux-gnu", "x86_64-pc-windows-msvc"]
# Which actions to run on pull requests
= "plan"
# Path that installers should place binaries in
= "CARGO_HOME"
# Whether to install an updater program
= false
# Sign every built artifact with a GitHub Artifact Attestation, so a consumer
# can check which workflow and commit produced it. crates.io stores no
# provenance, so the release page is the only place it can live.
= true
# Attest in the host phase, not the default build phase. The default attests
# only the per-platform archives; the installers a consumer actually curls are
# global artifacts built later, and the host phase is the first point where
# every file that will reach the release page exists in one place.
= "host"
# The host phase's permissions are job-scoped, so the release must be created
# in the same phase; cargo-dist's documentation asks for this pairing outright.
= "host"
# The build that signs is itself pinned by digest: cargo-dist references
# these actions by movable tag unless told otherwise, and the attest step
# is among them, so a moved tag could swap the code that mints the
# signature. The commit is the immutable execution reference; the tag it
# came from stays readable in the registry, as the discovery ref a
# freshness check reads. These are dist's own default versions, which are
# not the tags the hand-written workflows pin.
[]
= "d23441a48e516b6c34aea4fa41551a30e30af803" # v6
= "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8
= "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7
= "1e69f48acb82d1966a394da916b4c1698aa569d6" # v4