feat: trust kernels signed by kernels-community-rs

docs/source/security.md

@@ -187,8 +187,8 @@ the metadata. Signature verification checks the authenticity of the metadata
 itself:
 
 - Verify the signature against the given policy. The default policy only accepts
-  kernels signed by workflows in the `huggingface/kernels-community` GitHub
-  repository.
+  kernels signed by workflows in the `huggingface/kernels-community` and
+  `huggingface/kernels-community-rs` GitHub repositories.
 - Verify the authenticity of `metadata.json` using the signature.
 
 Signature verification is only performed for kernels downloaded from the Hub.

kernels/src/kernels/verify.py

@@ -71,6 +71,12 @@ def verify(self, cert: Certificate) -> None:
                 "https://github.com/huggingface/kernels-community/.github/workflows/sign-old-builds.yaml@refs/heads/main",
             ],
         ),
+        GitHubWorkflowPolicy(
+            repo_id="huggingface/kernels-community-rs",
+            signer_uris=[
+                "https://github.com/huggingface/kernels-community-rs/.github/workflows/build.yaml@refs/heads/main",
+            ],
+        ),
     ]
 )
 """