[rust] suppress cargo audit false positives

This adds `.cargo/audit.toml` which suppresses two crates that are flagged by `cargo audit` but does not affect us: * `time`, dependency of `chrono`, affected API is not used * `mach`, dependency of `serialport`, only affects MacOS Signed-off-by: Gary Guo <gary.guo@lowrisc.org>
lowRISC · Aug 3, 2023 · baa7099 · baa7099
1 parent e980bff
commit baa7099
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/third_party/rust/.cargo/audit.toml b/third_party/rust/.cargo/audit.toml
@@ -0,0 +1,5 @@
+[advisories]
+ignore = [
+    "RUSTSEC-2020-0071", # `time`, dependency of `chrono`, affected API is not used
+    "RUSTSEC-2020-0168", # `mach`, dependency of `serialport`, only affects MacOS
+]