Skip to content

Commit

Permalink
chore: update cargo audit ignore list
Browse files Browse the repository at this point in the history
A bunch of warnings have popped up. There's nothing we can do about them
and they basically no impact on us.

-  "RUSTSEC-2024-0370":  This is a warning about `proc-macro-errors` being unmaintained. It's a transitive dependency of `sigstore` and `oci-spec`.
-  "RUSTSEC-2023-0055":  This is a warning about `lexical` having multiple soundness issues. It's a transitive dependency of `sigstore`.

Signed-off-by: Flavio Castelli <fcastelli@suse.com>
  • Loading branch information
flavio committed Sep 6, 2024
1 parent 16943d3 commit 229ea74
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions .cargo/audit.toml
Original file line number Diff line number Diff line change
Expand Up @@ -17,4 +17,6 @@ ignore = [
"RUSTSEC-2023-0071", # "Classic" RSA timing sidechannel attack from non-constant-time implementation.
# Okay for local use.
# https://rustsec.org/advisories/RUSTSEC-2023-0071.html
"RUSTSEC-2024-0370", # This is a warning about `proc-macro-errors` being unmaintained. It's a transitive dependency of `sigstore` and `oci-spec`.
"RUSTSEC-2023-0055", # This is a warning about `lexical` having multiple soundness issues. It's a transitive dependency of `sigstore`.
]

0 comments on commit 229ea74

Please sign in to comment.