Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: ignore the tonic audit as a temporary stopgap #3052

Merged
merged 1 commit into from
Oct 2, 2024

Conversation

yihau
Copy link
Member

@yihau yihau commented Oct 2, 2024

Problem

I'm too naive. #3050 will take some time to upgrade. use this quick fix for unblocking master asap

Summary of Changes

ignore tonic audit report temporarily

@yihau yihau requested review from t-nelson and willhickey October 2, 2024 05:23
@2501babe 2501babe self-requested a review October 2, 2024 12:58
@yihau yihau merged commit 9b5525d into anza-xyz:master Oct 2, 2024
20 checks passed
@yihau yihau deleted the audit-2 branch October 2, 2024 13:01
joncinque added a commit to joncinque/solana-program-library that referenced this pull request Oct 2, 2024
#### Problem

Similar to anza-xyz/agave#3052, we need to
ignore the RUSTSEC advisory on tonic until it's resolved upstream.

#### Summary of changes

Ignore the tonic advisory.
joncinque added a commit to solana-labs/solana-program-library that referenced this pull request Oct 2, 2024
#### Problem

Similar to anza-xyz/agave#3052, we need to
ignore the RUSTSEC advisory on tonic until it's resolved upstream.

#### Summary of changes

Ignore the tonic advisory.
Copy link

mergify bot commented Oct 3, 2024

Backports to the stable branch are to be avoided unless absolutely necessary for fixing bugs, security issues, and perf regressions. Changes intended for backport should be structured such that a minimum effective diff can be committed separately from any refactoring, plumbing, cleanup, etc that are not strictly necessary to achieve the goal. Any of the latter should go only into master and ride the normal stabilization schedule.

mergify bot pushed a commit that referenced this pull request Oct 3, 2024
(cherry picked from commit 9b5525d)

# Conflicts:
#	ci/do-audit.sh
willhickey added a commit that referenced this pull request Oct 4, 2024
…3052) (#3062)

* ci: ignore the tonic audit as a temporary stopgap (#3052)

(cherry picked from commit 9b5525d)

# Conflicts:
#	ci/do-audit.sh

* Fix conflicts

* Update to mimic v2.0 change

---------

Co-authored-by: Yihau Chen <yihau.chen@icloud.com>
Co-authored-by: WillHickey <will.hickey@anza.xyz>
ray-kast pushed a commit to abklabs/agave that referenced this pull request Nov 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants