Use forked version of apple-codesign to remove RSA dependency (metalb…

…ear-co#2799)
Razz4780 · Oct 6, 2024 · c20f448 · c20f448
1 parent 149f827
commit c20f448
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 163 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/changelog.d/+use-apple-codesign-mini.changed.md b/changelog.d/+use-apple-codesign-mini.changed.md
@@ -0,0 +1 @@
+Use forked version of apple-codesign to remove RSA dependency
diff --git a/mirrord/sip/Cargo.toml b/mirrord/sip/Cargo.toml
@@ -17,7 +17,8 @@ edition.workspace = true
 workspace = true
 
 [dependencies]
-apple-codesign = { version = "0.27", default-features = false}
+# we don't like upstream apple-platform-rs because it depends on RSA which has an open CVE.
+apple-codesign = { git = "https://github.com/metalbear-co/apple-platform-rs-mini", version = "0.27", default-features = false}
 object = "0.36"
 tempfile = "3"
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Use forked version of apple-codesign to remove RSA dependency