Skip to content

Commit 9aa6ddb

Browse files
committed
Have CI's cargo audit ignore RUSTSEC-2021-0125
This advisory is only relevant for a downstream dependency of `criterion`, which we currently don't want to bump in order to continue benchmarking with our MSRV 1.63.0. We therefore just add it to our ignore list for now.
1 parent 3fd4b39 commit 9aa6ddb

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

.github/workflows/audit.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,3 +15,9 @@ jobs:
1515
- uses: rustsec/audit-check@v1.4.1
1616
with:
1717
token: ${{ secrets.GITHUB_TOKEN }}
18+
ignore: "RUSTSEC-2021-0145"
19+
# RUSTSEC-2021-0145 pertains `atty`, which is a depencency of
20+
# `criterion`. While the latter removed the depencency in its
21+
# newest version, it would also require a higher `rustc`. We
22+
# therefore avoid bumping it to allow benchmarking with our
23+
# `rustc` 1.63 MSRV.

0 commit comments

Comments
 (0)