Enum WorkspaceRegistryAccess 

pub enum WorkspaceRegistryAccess {
    Off,
    PublicOnly,
    All,
}

The user-facing policy governing whether a workspace-declared registry index is ever fetched at all.

Applied only to workspace-provenance URLs (a Cargo.toml/.cargo/config.toml value found inside the opened workspace) — a $CARGO_HOME-provenance index is the user’s own trusted configuration and is never policy-checked, under any variant here.

Variants

Off

Block every workspace-declared index — the only complete boundary. Also blocks the registry/registry-index alias path, not only [source] replace-with.

PublicOnly

Allow only HostClass::Global hosts — blocks the observed attack shape (an IP literal in a metadata/RFC1918 range) while leaving a corporate https://index.mycorp.dev working, since a DNS name cannot be classified without resolving it (the residual risk this variant’s name is honest about — see the module docs).

All

Allow every class — today’s pre-hardening behavior, the escape hatch for a workspace that legitimately points at an RFC1918/loopback registry.

Implementations

impl WorkspaceRegistryAccess

pub const fn allows(self, class: HostClass) -> bool

Whether a workspace-declared URL classified as class may be fetched under this policy.

Trait Implementations

impl Clone for WorkspaceRegistryAccess

fn clone(&self) -> WorkspaceRegistryAccess

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for WorkspaceRegistryAccess

impl Debug for WorkspaceRegistryAccess

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for WorkspaceRegistryAccess

fn default() -> WorkspaceRegistryAccess

Returns the “default value” for a type.

impl Eq for WorkspaceRegistryAccess

impl Hash for WorkspaceRegistryAccess

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for WorkspaceRegistryAccess

fn eq(&self, other: &WorkspaceRegistryAccess) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for WorkspaceRegistryAccess