Skip to content

runtime/rust

Rust runtime policy: crates.io and its CDNs, rustup/toolchain downloads, and GitHub for git dependencies.

Reference Kind Latest Architecture Size Publisher
runtime/rust policy 1.0.0 — — tinylabscom/mvm-packs (official)
Terminal window
mvmctl pull runtime/rust
mvmctl pull runtime/rust@1.0.0

This pack is a policy and is not runnable: it has no kernel, root filesystem or entrypoint.

Version Manifest SHA-256 Revoked
1.0.0 e9e27c4055186d2416af010804000410cbd54b86d530084aa706cb0bf79c344e no

Included groups name other policies; they do not describe every effective permission.

Declaration Value
Direct network allow crates.io:443
Direct network allow index.crates.io:443
Direct network allow static.crates.io:443
Direct network allow static.rust-lang.org:443
Direct network allow github.com:443
Direct network allow objects.githubusercontent.com:443

Binding names and allowed hosts only; a binding is not proof that a secret is required, and no secret values are stored here.

Binding Allowed hosts
None declared —

Each manifest is signed keyless; manifest.sigstore.json binds it to a workflow identity (issuer https://token.actions.githubusercontent.com). Identities each version can be verified under:

  • 1.0.0: https://github.com/tinylabscom/mvm-packs/.github/workflows/publish.yml@refs/heads/main