[tor-bugs] #31588 [Applications/Tor Browser]: Be smarter about vendoring for Rust projects

[Tor Bug Tracker & Wiki]

#31588: Be smarter about vendoring for Rust projects
--------------------------------------+--------------------------
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  task                      |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-rbm                   |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by boklm):

 If we trust that `cargo vendor` will provide reproducible output, and is
 correctly checking downloaded files, then maybe we could add some step in
 the build where we allow network access in the container, in order to run
 `cargo vendor` and generate a vendor tarball.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31588#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online