From 229ea749b566970b874f42403edf71232e6ebc52 Mon Sep 17 00:00:00 2001 From: Flavio Castelli Date: Fri, 6 Sep 2024 09:37:41 +0200 Subject: [PATCH] chore: update cargo audit ignore list A bunch of warnings have popped up. There's nothing we can do about them and they basically no impact on us. - "RUSTSEC-2024-0370": This is a warning about `proc-macro-errors` being unmaintained. It's a transitive dependency of `sigstore` and `oci-spec`. - "RUSTSEC-2023-0055": This is a warning about `lexical` having multiple soundness issues. It's a transitive dependency of `sigstore`. Signed-off-by: Flavio Castelli --- .cargo/audit.toml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.cargo/audit.toml b/.cargo/audit.toml index 62c9655d..239d1e5f 100644 --- a/.cargo/audit.toml +++ b/.cargo/audit.toml @@ -17,4 +17,6 @@ ignore = [ "RUSTSEC-2023-0071", # "Classic" RSA timing sidechannel attack from non-constant-time implementation. # Okay for local use. # https://rustsec.org/advisories/RUSTSEC-2023-0071.html + "RUSTSEC-2024-0370", # This is a warning about `proc-macro-errors` being unmaintained. It's a transitive dependency of `sigstore` and `oci-spec`. + "RUSTSEC-2023-0055", # This is a warning about `lexical` having multiple soundness issues. It's a transitive dependency of `sigstore`. ]