fix(Cargo) Use a tag to ensure reproduceable builds for rust-ear and …

…rust-apiclient. The version for this dependencies was previously undefined, which is leaving open space for not being able to reproduce builds. Signed-off-by: Arnaud de Grandmaison <[email protected]>
veraison · Dec 18, 2024 · 6654abd · 6654abd
1 parent 52bb2d2
commit 6654abd
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/rust-keybroker/Cargo.lock b/rust-keybroker/Cargo.lock
diff --git a/rust-keybroker/Cargo.toml b/rust-keybroker/Cargo.toml
@@ -12,7 +12,7 @@ actix-web = "4"
 anyhow = "1.0.89"
 base64 = "0.22.1"
 clap = { version = "=4.3.24", features = ["derive", "std"] }
-ear = { git = "https://github.com/veraison/rust-ear.git" }
+ear = { git = "https://github.com/veraison/rust-ear.git", tag = "v0.2.0" }
 log = { version = "0.4.22", features = ["std", "serde"] }
 phf = "0.11.2"
 rand = "0.8.5"
@@ -26,4 +26,4 @@ sha2 = "0.10.8"
 stderrlog = "0.6.0"
 thiserror = "1.0.63"
 tsm_report = { git = "https://github.com/veracruz-project/cca-utils-rs.git", rev = "cb88b76da722f2991365b159e3d575249dfbbe7d"}
-veraison-apiclient = { git = "https://github.com/veraison/rust-apiclient.git" }
+veraison-apiclient = { git = "https://github.com/veraison/rust-apiclient.git", tag = "c-bindings"}