# nordisk/heimdall: files at df02795d4784 .cargo/ assets/ attestations/ bench/ ci/ crates/ docs/ fuzz/ guests/ LICENSES/ profiles/ scripts/ xtask/ .gitignore Cargo.lock Cargo.toml CHANGELOG.md CLA-SIGNATURES.md CLA.md COMMERCIAL-LICENSING.md CONTRIBUTING.md deny.toml LICENSE NOTICE README.md rustfmt.toml SECURITY.md .cargo/config.toml assets/heimdall.webp attestations/heimdall-0.1.0.intoto.jsonl attestations/heimdall-0.2.0.intoto.jsonl attestations/heimdall-0.3.0.intoto.jsonl attestations/heimdall-guests-0.2.1.intoto.jsonl bench/znippy-unpack/ ci/a64.Containerfile ci/ci.Containerfile crates/heimdall-broker/ crates/heimdall-cli/ crates/heimdall-container/ crates/heimdall-core/ crates/heimdall-plain/ crates/heimdall-probe/ crates/heimdall-run/ crates/heimdall-scan/ crates/heimdall-seccomp/ crates/heimdall-trace/ crates/heimdall-wasm/ docs/examples/ docs/API.md docs/BUILD-THING.md docs/CLI.md docs/GATLING-WASM.md docs/OPENSSF-ANSWERS.md docs/OPENZL-WASM.md docs/POLICY.md docs/RUN.md docs/SECCOMP.md docs/SPEC.md fuzz/common/ fuzz/fuzz_targets/ fuzz/seeds/ fuzz/.gitignore fuzz/Cargo.toml guests/static-scan/ guests/verify-bundle/ guests/README.md LICENSES/AGPL-3.0-only.txt LICENSES/Apache-2.0.txt LICENSES/CC-BY-4.0.txt profiles/heimdall-wasm-host/ profiles/src/ profiles/tests/ profiles/Cargo.toml scripts/ci.sh scripts/container-tests.sh scripts/fuzz.sh scripts/gen-syscall-tables.sh scripts/io-tests.sh scripts/plain-tests.sh scripts/seccomp-tests.sh scripts/trace-tests.sh xtask/src/ xtask/Cargo.toml bench/znippy-unpack/profiles/ bench/znippy-unpack/.gitignore bench/znippy-unpack/enforce.py bench/znippy-unpack/make-corpus.sh bench/znippy-unpack/measure.sh bench/znippy-unpack/README.md crates/heimdall-broker/src/ crates/heimdall-broker/tests/ crates/heimdall-broker/Cargo.toml crates/heimdall-broker/LICENSE crates/heimdall-cli/src/ crates/heimdall-cli/tests/ crates/heimdall-cli/Cargo.toml crates/heimdall-cli/LICENSE crates/heimdall-container/src/ crates/heimdall-container/tests/ crates/heimdall-container/Cargo.toml crates/heimdall-core/src/ crates/heimdall-core/tests/ crates/heimdall-core/Cargo.toml crates/heimdall-core/LICENSE crates/heimdall-plain/src/ crates/heimdall-plain/tests/ crates/heimdall-plain/Cargo.toml crates/heimdall-plain/LICENSE crates/heimdall-probe/src/ crates/heimdall-probe/tests/ crates/heimdall-probe/Cargo.toml crates/heimdall-probe/LICENSE crates/heimdall-run/src/ crates/heimdall-run/tests/ crates/heimdall-run/Cargo.toml crates/heimdall-run/LICENSE crates/heimdall-scan/src/ crates/heimdall-scan/tests/ crates/heimdall-scan/Cargo.toml crates/heimdall-scan/LICENSE crates/heimdall-seccomp/src/ crates/heimdall-seccomp/tests/ crates/heimdall-seccomp/Cargo.toml crates/heimdall-seccomp/LICENSE crates/heimdall-trace/src/ crates/heimdall-trace/tests/ crates/heimdall-trace/Cargo.toml crates/heimdall-trace/LICENSE crates/heimdall-wasm/src/ crates/heimdall-wasm/tests/ crates/heimdall-wasm/wit/ crates/heimdall-wasm/Cargo.toml crates/heimdall-wasm/LICENSE docs/examples/policy.toml fuzz/common/wasm_kit.rs fuzz/common/wasm_seeds.rs fuzz/fuzz_targets/output_name.rs fuzz/fuzz_targets/pinned_key_text.rs fuzz/fuzz_targets/policy_file.rs fuzz/fuzz_targets/result_encoding.rs fuzz/fuzz_targets/signed_result_wire.rs fuzz/fuzz_targets/verify_result_file.rs fuzz/fuzz_targets/wasm_emit_file.rs fuzz/fuzz_targets/wasm_guest_load.rs fuzz/seeds/output_name/ fuzz/seeds/pinned_key_text/ fuzz/seeds/policy_file/ fuzz/seeds/result_encoding/ fuzz/seeds/signed_result_wire/ fuzz/seeds/verify_result_file/ fuzz/seeds/wasm_emit_file/ fuzz/seeds/wasm_guest_load/ guests/static-scan/src/ guests/static-scan/tests/ guests/static-scan/Cargo.lock guests/static-scan/Cargo.toml guests/verify-bundle/examples/ guests/verify-bundle/fuzz/ guests/verify-bundle/openzl/ guests/verify-bundle/src/ guests/verify-bundle/tests/ guests/verify-bundle/tools/ guests/verify-bundle/build.rs guests/verify-bundle/Cargo.lock guests/verify-bundle/Cargo.toml guests/verify-bundle/README.md profiles/heimdall-wasm-host/corpus/ profiles/heimdall-wasm-host/verify-bundle/ profiles/heimdall-wasm-host/workload.toml profiles/heimdall-wasm-host/x86_64-glibc.json profiles/heimdall-wasm-host/x86_64-glibc.oci.json profiles/heimdall-wasm-host/x86_64-glibc.probe.json profiles/heimdall-wasm-host/x86_64-glibc.rs profiles/heimdall-wasm-host/x86_64-musl.json profiles/heimdall-wasm-host/x86_64-musl.oci.json profiles/heimdall-wasm-host/x86_64-musl.probe.json profiles/heimdall-wasm-host/x86_64-musl.rs profiles/src/lib.rs profiles/tests/enforce.rs profiles/tests/in_sync.rs xtask/src/main.rs bench/znippy-unpack/profiles/znippy-unpack/ crates/heimdall-broker/src/bin/ crates/heimdall-broker/src/broker.rs crates/heimdall-broker/src/filter.rs crates/heimdall-broker/src/lib.rs crates/heimdall-broker/src/policy.rs crates/heimdall-broker/src/spawn.rs crates/heimdall-broker/src/support.rs crates/heimdall-broker/src/sys.rs crates/heimdall-broker/tests/kernel.rs crates/heimdall-broker/tests/policy.rs crates/heimdall-cli/src/main.rs crates/heimdall-cli/src/profile.rs crates/heimdall-cli/src/trace.rs crates/heimdall-cli/src/worker.rs crates/heimdall-cli/tests/cli.rs crates/heimdall-cli/tests/genprof.rs crates/heimdall-cli/tests/profile_corpus.rs crates/heimdall-cli/tests/trace_cli.rs crates/heimdall-cli/tests/wasm_e2e.rs crates/heimdall-cli/tests/wasm_runner.rs crates/heimdall-container/src/bin/ crates/heimdall-container/src/brokered.rs crates/heimdall-container/src/confine.rs crates/heimdall-container/src/exec.rs crates/heimdall-container/src/genprof.rs crates/heimdall-container/src/iolimit.rs crates/heimdall-container/src/kernel.rs crates/heimdall-container/src/lib.rs crates/heimdall-container/src/profile.rs crates/heimdall-container/src/shim.rs crates/heimdall-container/src/spec.rs crates/heimdall-container/src/sys.rs crates/heimdall-container/src/workspace.rs crates/heimdall-container/tests/container.rs crates/heimdall-container/tests/exec.rs crates/heimdall-container/tests/genprof.rs crates/heimdall-container/tests/io.rs crates/heimdall-container/tests/iolimit.rs crates/heimdall-container/tests/kernel.rs crates/heimdall-container/tests/runner_fake_shim.rs crates/heimdall-container/tests/spec.rs crates/heimdall-container/tests/workspace.rs crates/heimdall-container/tests/workspace_kernel.rs crates/heimdall-core/src/codec.rs crates/heimdall-core/src/codes.rs crates/heimdall-core/src/fuzz_api.rs crates/heimdall-core/src/hex.rs crates/heimdall-core/src/lib.rs crates/heimdall-core/src/outputs.rs crates/heimdall-core/src/runner.rs crates/heimdall-core/src/signed.rs crates/heimdall-core/src/types.rs crates/heimdall-core/tests/common/ crates/heimdall-core/tests/api.rs crates/heimdall-core/tests/codec.rs crates/heimdall-core/tests/fuzz_seeds.proptest-regressions crates/heimdall-core/tests/fuzz_seeds.rs crates/heimdall-core/tests/outputs.rs crates/heimdall-core/tests/pinned_key.rs crates/heimdall-core/tests/proptests.proptest-regressions crates/heimdall-core/tests/proptests.rs crates/heimdall-core/tests/signed_result.rs crates/heimdall-core/tests/types.rs crates/heimdall-core/tests/workspace.rs crates/heimdall-plain/src/bin/ crates/heimdall-plain/src/default_profile.rs crates/heimdall-plain/src/forklock.rs crates/heimdall-plain/src/idmap.rs crates/heimdall-plain/src/image.rs crates/heimdall-plain/src/lib.rs crates/heimdall-plain/src/outputs.rs crates/heimdall-plain/src/shim.rs crates/heimdall-plain/src/spec.rs crates/heimdall-plain/tests/common/ crates/heimdall-plain/tests/container.rs crates/heimdall-plain/tests/idmap.rs crates/heimdall-plain/tests/image.rs crates/heimdall-plain/tests/runner_fake_shim.rs crates/heimdall-plain/tests/spec.rs crates/heimdall-probe/src/check.rs crates/heimdall-probe/src/codegen.rs crates/heimdall-probe/src/facts.rs crates/heimdall-probe/src/learn.rs crates/heimdall-probe/src/lib.rs crates/heimdall-probe/src/live.rs crates/heimdall-probe/src/minimise.rs crates/heimdall-probe/src/observe.rs crates/heimdall-probe/src/workload.rs crates/heimdall-probe/tests/kernel.rs crates/heimdall-probe/tests/minimise.rs crates/heimdall-run/src/fuzz_api.rs crates/heimdall-run/src/indir.rs crates/heimdall-run/src/job.rs crates/heimdall-run/src/lib.rs crates/heimdall-run/src/outdir.rs crates/heimdall-run/src/policy_file.rs crates/heimdall-run/src/runner.rs crates/heimdall-run/src/verify.rs crates/heimdall-run/src/wasm.rs crates/heimdall-run/tests/fuzz_seeds.rs crates/heimdall-run/tests/indir.rs crates/heimdall-run/tests/job.rs crates/heimdall-run/tests/outdir.rs crates/heimdall-run/tests/policy_file.rs crates/heimdall-scan/src/input.rs crates/heimdall-scan/src/lib.rs crates/heimdall-scan/src/purl.rs crates/heimdall-scan/src/report.rs crates/heimdall-scan/src/statement.rs crates/heimdall-scan/tests/contract.rs crates/heimdall-seccomp/src/tables/ crates/heimdall-seccomp/src/arch.rs crates/heimdall-seccomp/src/bpf.rs crates/heimdall-seccomp/src/interp.rs crates/heimdall-seccomp/src/launch.rs crates/heimdall-seccomp/src/lib.rs crates/heimdall-seccomp/src/notif.rs crates/heimdall-seccomp/src/oci.rs crates/heimdall-seccomp/src/profile.rs crates/heimdall-seccomp/tests/arch.rs crates/heimdall-seccomp/tests/bpf.rs crates/heimdall-seccomp/tests/kernel.rs crates/heimdall-seccomp/tests/oci.rs crates/heimdall-seccomp/tests/profile.rs crates/heimdall-trace/src/bin/ crates/heimdall-trace/src/classify.rs crates/heimdall-trace/src/diff.rs crates/heimdall-trace/src/doc.rs crates/heimdall-trace/src/image.rs crates/heimdall-trace/src/job.rs crates/heimdall-trace/src/lib.rs crates/heimdall-trace/src/record.rs crates/heimdall-trace/src/tracer.rs crates/heimdall-trace/tests/worker/ crates/heimdall-trace/tests/kernel.rs crates/heimdall-trace/tests/trace_doc.rs crates/heimdall-wasm/src/codes.rs crates/heimdall-wasm/src/host.rs crates/heimdall-wasm/src/lib.rs crates/heimdall-wasm/src/limits.rs crates/heimdall-wasm/src/names.rs crates/heimdall-wasm/src/outcome.rs crates/heimdall-wasm/src/split.rs crates/heimdall-wasm/tests/common/ crates/heimdall-wasm/tests/rust-guest/ crates/heimdall-wasm/tests/cpu_limits.rs crates/heimdall-wasm/tests/emit_file.rs crates/heimdall-wasm/tests/good_guest.rs crates/heimdall-wasm/tests/guest_output.rs crates/heimdall-wasm/tests/link.rs crates/heimdall-wasm/tests/memory_limits.rs crates/heimdall-wasm/tests/no_memfd.rs crates/heimdall-wasm/tests/properties.proptest-regressions crates/heimdall-wasm/tests/properties.rs crates/heimdall-wasm/tests/refusal_codes.rs crates/heimdall-wasm/tests/rust_guest.rs crates/heimdall-wasm/tests/signatures.rs crates/heimdall-wasm/wit/heimdall.wit fuzz/seeds/output_name/1692419006a8 fuzz/seeds/output_name/5ec1f7e700f3 fuzz/seeds/output_name/9dbd93802160 fuzz/seeds/output_name/badutf8 fuzz/seeds/output_name/c14cddc033f6 fuzz/seeds/output_name/c8687a08aa5d fuzz/seeds/output_name/cdb4ee2aea69 fuzz/seeds/output_name/d6b96a97d147 fuzz/seeds/output_name/nul fuzz/seeds/pinned_key_text/badutf8 fuzz/seeds/pinned_key_text/v2 fuzz/seeds/pinned_key_text/valid fuzz/seeds/pinned_key_text/wrong_key_id fuzz/seeds/policy_file/binary fuzz/seeds/policy_file/ceiling.toml fuzz/seeds/policy_file/example.toml fuzz/seeds/policy_file/file_above_total.toml fuzz/seeds/policy_file/minimal.toml fuzz/seeds/policy_file/native.toml fuzz/seeds/policy_file/net.toml fuzz/seeds/policy_file/read.toml fuzz/seeds/policy_file/zero.toml fuzz/seeds/result_encoding/refused fuzz/seeds/result_encoding/sample fuzz/seeds/result_encoding/short fuzz/seeds/result_encoding/trailing # (cut here: the tree is longer; clone the repository for all of it)