From a050d1f4290246bc0e3939b36daa20a77439259c Mon Sep 17 00:00:00 2001 From: simonsan <14062932+simonsan@users.noreply.github.com> Date: Sun, 17 Nov 2024 03:52:42 +0100 Subject: [PATCH] add ignored rustsec advisories Signed-off-by: simonsan <14062932+simonsan@users.noreply.github.com> --- .cargo/audit.toml | 4 ++++ deny.toml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/.cargo/audit.toml b/.cargo/audit.toml index 0b118933..aa1db3e6 100644 --- a/.cargo/audit.toml +++ b/.cargo/audit.toml @@ -3,4 +3,8 @@ ignore = [ # FIXME!: See https://github.com/RustCrypto/RSA/issues/19#issuecomment-1822995643. # There is no workaround available yet. "RUSTSEC-2023-0071", + # FIXME: backoff => used in backend, need to be replaced with backon + "RUSTSEC-2024-0384", + # FIXME: derivative => used for default impls + "RUSTSEC-2024-0388", ] diff --git a/deny.toml b/deny.toml index d2c10e72..6c630191 100644 --- a/deny.toml +++ b/deny.toml @@ -74,6 +74,10 @@ ignore = [ # FIXME!: See https://github.com/RustCrypto/RSA/issues/19#issuecomment-1822995643. # There is no workaround available yet. "RUSTSEC-2023-0071", + # FIXME: backoff => used in backend, need to be replaced with backon + "RUSTSEC-2024-0384", + # FIXME: derivative => used for default impls + "RUSTSEC-2024-0388", # { id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" }, # "a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish # { crate = "a-crate-that-is-yanked@0.1.1", reason = "you can specify why you are ignoring the yanked crate" },