Files
sanctum/Cargo.toml
T
harald 1cdb30147b
Sanctum Release / Build & Release (Windows x86_64) (push) Waiting to run
release: v0.7.1 — Security-Patch (R-01 bis R-06)
- R-01: Bereinigung verbliebener Restbehauptungen in Doku und Code (LEGAL.md, README.md, QUICKSTART.md, main.rs, crypto/storage/recovery/verify.rs)
- R-02: Lückenloser Carrier-Schutz in SanctumFs::copy (Quelle & Ziel) und sync (Pull-Skip & Push-Schutz)
- R-03: Shared Dateinamen-Validierung (validate_node_name) in pathutil.rs, durchgesetzt in storage.rs und vfs.rs
- R-04: Fail-closed Release-Packaging & obligatorische Minisign-Signatur in CI (.gitea/workflows/release.yaml) und Scripts
- R-05: Session-Token Beseitigung im argv: In-Process Win32 WNetAddConnection2W/WNetCancelConnection2W, kein gio argv-Token, Multi-Auth HTTP Middleware (Basic Auth, X-Sanctum-Token, Path-Fallback) mit 401 WWW-Authenticate
- R-06: Sofortiges Löschen von SANCTUM_RECOVERY_KEY aus der Prozessumgebung
2026-09-18 19:49:38 +02:00

56 lines
1.7 KiB
TOML

[package]
name = "sanctum"
version = "0.7.1"
edition = "2021"
authors = ["Harald Pansi <harald@pansi.eu>", "Sanctum Engineering Team"]
description = "Verschlüsselter Ein-Datei-Container unter Windows im reinen Userland via WebDAV"
license = "MIT"
repository = "https://gitea.pansi.eu/harald/sanctum"
homepage = "https://gitea.pansi.eu/harald/sanctum"
readme = "README.md"
keywords = ["encryption", "container", "windows", "webdav", "security"]
categories = ["cryptography", "command-line-utilities", "filesystem"]
[dependencies]
base64 = "0.22"
clap = { version = "4.5", features = ["derive"] }
rpassword = "7.3"
argon2 = { version = "0.5", features = ["password-hash"] }
aes-gcm = { version = "0.10", features = ["zeroize"] }
rand = "0.8"
zeroize = { version = "1.8", features = ["derive", "zeroize_derive"] }
rusqlite = { version = "0.32", features = ["bundled", "backup"] }
tokio = { version = "1.40", features = ["full"] }
dav-server = { version = "0.11", default-features = false }
hyper = { version = "1.4", features = ["server", "http1"] }
hyper-util = { version = "0.1", features = ["tokio", "server-auto"] }
http-body-util = "0.1"
bytes = "1.7"
futures-util = "0.3"
thiserror = "2.0"
anyhow = "1.0"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
dyn-clone = "1.0"
lz4_flex = "0.11"
bip39 = { version = "2.2", features = ["zeroize"] }
hex = "0.4"
self-replace = "1.5"
ureq = { version = "2.10", default-features = false, features = ["json", "tls"] }
sha2 = "0.10"
semver = "1.0"
minisign-verify = "0.2"
tempfile = "3"
[target.'cfg(windows)'.dependencies]
tray-item = "0.10"
[profile.release]
opt-level = 3
lto = true
codegen-units = 1
panic = "unwind"
strip = true