From bad3b3d700d06cee94868ea9641caf633cc96571 Mon Sep 17 00:00:00 2001 From: "Dustin J. Mitchell" Date: Sat, 6 Aug 2022 01:47:04 +0000 Subject: [PATCH] use the (existing) .cargo/audit.toml to ignore some rust advisories --- {taskchampion/.cargo => .cargo}/audit.toml | 1 + {taskchampion/.cargo => .cargo}/config | 0 .github/workflows/security.yml | 1 - 3 files changed, 1 insertion(+), 1 deletion(-) rename {taskchampion/.cargo => .cargo}/audit.toml (61%) rename {taskchampion/.cargo => .cargo}/config (100%) diff --git a/taskchampion/.cargo/audit.toml b/.cargo/audit.toml similarity index 61% rename from taskchampion/.cargo/audit.toml rename to .cargo/audit.toml index 948236ca9..8e32d5c6c 100644 --- a/taskchampion/.cargo/audit.toml +++ b/.cargo/audit.toml @@ -1,5 +1,6 @@ [advisories] ignore = [ + "RUSTSEC-2021-0124", # see https://github.com/GothenburgBitFactory/taskwarrior/issues/2830 "RUSTSEC-2020-0159", # segfault in localtime_r - low risk to TC "RUSTSEC-2020-0071", # same localtime_r bug as above ] diff --git a/taskchampion/.cargo/config b/.cargo/config similarity index 100% rename from taskchampion/.cargo/config rename to .cargo/config diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 1a2517d9b..e36b6ebfd 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -17,5 +17,4 @@ jobs: - uses: actions/checkout@v2 - uses: GothenburgBitFactory/audit-check@master with: - ignore: RUSTSEC-2021-0124, RUSTSEC-2020-0071 token: ${{ secrets.GITHUB_TOKEN }}