From f65b138f34e3343bbf49e665bf065547bb837029 Mon Sep 17 00:00:00 2001
From: Jake Wimmer <283714808+jakewimmer@users.noreply.github.com>
Date: Tue, 16 Jun 2026 08:05:50 -0700
Subject: [PATCH] Support cargo-vet (#1908)

---
 TOOLS.md                          |  1 +
 manifests/cargo-vet.json          | 45 +++++++++++++++++++++++++++++++
 tools/ci/tool-list.sh             |  1 +
 tools/codegen/base/cargo-vet.json | 17 ++++++++++++
 4 files changed, 64 insertions(+)
 create mode 100644 manifests/cargo-vet.json
 create mode 100644 tools/codegen/base/cargo-vet.json

diff --git a/TOOLS.md b/TOOLS.md
index 9fa1fe3d..96b5cc3a 100644
--- a/TOOLS.md
+++ b/TOOLS.md
@@ -46,6 +46,7 @@ See the [Supported tools section in README.md](README.md#supported-tools) for ho
 | [**cargo-tarpaulin**](https://github.com/xd009642/tarpaulin) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/xd009642/tarpaulin/releases) | Linux, macOS, Windows | [MIT](https://github.com/xd009642/tarpaulin/blob/develop/LICENSE-MIT) OR [Apache-2.0](https://github.com/xd009642/tarpaulin/blob/develop/LICENSE-APACHE) | |
 | [**cargo-udeps**](https://github.com/est31/cargo-udeps) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/est31/cargo-udeps/releases) | Linux, macOS, Windows | [Apache-2.0 OR MIT](https://github.com/est31/cargo-udeps/blob/master/LICENSE) | |
 | [**cargo-valgrind**](https://github.com/jfrimmel/cargo-valgrind) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/jfrimmel/cargo-valgrind/releases) | Linux, macOS, Windows | [MIT](https://github.com/jfrimmel/cargo-valgrind/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/jfrimmel/cargo-valgrind/blob/master/LICENSE-APACHE) | |
+| [**cargo-vet**](https://github.com/mozilla/cargo-vet) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/mozilla/cargo-vet/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/mozilla/cargo-vet/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/mozilla/cargo-vet/blob/main/LICENSE-MIT) | |
 | [**cargo-xwin**](https://github.com/rust-cross/cargo-xwin) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rust-cross/cargo-xwin/releases) | Linux, macOS, Windows | [MIT](https://github.com/rust-cross/cargo-xwin/blob/main/LICENSE) | |
 | [**cargo-zigbuild**](https://github.com/rust-cross/cargo-zigbuild) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rust-cross/cargo-zigbuild/releases) | Linux, macOS, Windows | [MIT](https://github.com/rust-cross/cargo-zigbuild/blob/main/LICENSE) | |
 | [**convco**](https://github.com/convco/convco) | `$HOME/.install-action/bin` | [GitHub Releases](https://github.com/convco/convco/releases) | Linux, macOS, Windows | [MIT](https://github.com/convco/convco/blob/main/LICENSE) | |
diff --git a/manifests/cargo-vet.json b/manifests/cargo-vet.json
new file mode 100644
index 00000000..fac12cbe
--- /dev/null
+++ b/manifests/cargo-vet.json
@@ -0,0 +1,45 @@
+{
+  "rust_crate": "cargo-vet",
+  "template": {
+    "x86_64_linux_gnu": {
+      "url": "https://github.com/mozilla/cargo-vet/releases/download/v${version}/cargo-vet-x86_64-unknown-linux-gnu.tar.xz",
+      "bin": "cargo-vet-x86_64-unknown-linux-gnu/cargo-vet"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/mozilla/cargo-vet/releases/download/v${version}/cargo-vet-x86_64-apple-darwin.tar.xz",
+      "bin": "cargo-vet-x86_64-apple-darwin/cargo-vet"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/mozilla/cargo-vet/releases/download/v${version}/cargo-vet-x86_64-pc-windows-msvc.zip",
+      "bin": "cargo-vet.exe"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/mozilla/cargo-vet/releases/download/v${version}/cargo-vet-aarch64-apple-darwin.tar.xz",
+      "bin": "cargo-vet-aarch64-apple-darwin/cargo-vet"
+    }
+  },
+  "latest": {
+    "version": "0.10.0"
+  },
+  "0.10": {
+    "version": "0.10.0"
+  },
+  "0.10.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DCE3E854D6E7DF",
+      "hash": "c7664d9db5dd2ff813f20303650ac8253fa712ff2a1ea9ce12bed71e346f1744"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DCE3E854ABC2AD",
+      "hash": "144afee60a4d1d83948470cc55e7258230abf61380d8418b9a0a01609aa2385d"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DCE3E854C93B9E",
+      "hash": "a543c793a50fc3ecd69b84ea4a83a6f142a01190cf276607e09e34bd8f0f9a2e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DCE3E854AA8B8B",
+      "hash": "4b6cdbb7b1287428daf4a9bb3dc83b73ceb336893dbee6df35371a2e06ced51a"
+    }
+  }
+}
diff --git a/tools/ci/tool-list.sh b/tools/ci/tool-list.sh
index 210fa107..72bb4f19 100755
--- a/tools/ci/tool-list.sh
+++ b/tools/ci/tool-list.sh
@@ -29,6 +29,7 @@ glibc_pre_2_34_incompat=(
 # version `GLIBC_2.31' not found
 glibc_pre_2_31_incompat=(
   "${glibc_pre_2_34_incompat[@]}"
+  cargo-vet
 )
 # version `GLIBC_2.28' not found
 glibc_pre_2_28_incompat=(
diff --git a/tools/codegen/base/cargo-vet.json b/tools/codegen/base/cargo-vet.json
new file mode 100644
index 00000000..e859ea43
--- /dev/null
+++ b/tools/codegen/base/cargo-vet.json
@@ -0,0 +1,17 @@
+{
+  "repository": "https://github.com/mozilla/cargo-vet",
+  "license_markdown": "[Apache-2.0](https://github.com/mozilla/cargo-vet/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/mozilla/cargo-vet/blob/main/LICENSE-MIT)",
+  "tag_prefix": "v",
+  "rust_crate": "${package}",
+  "asset_name": "${package}-${rust_target}.tar.xz",
+  "bin": "${package}-${rust_target}/${package}${exe}",
+  "platform": {
+    "x86_64_linux_gnu": {},
+    "x86_64_macos": {},
+    "x86_64_windows": {
+      "asset_name": "${package}-${rust_target}.zip",
+      "bin": "${package}${exe}"
+    },
+    "aarch64_macos": {}
+  }
+}