Dustin J. Mitchell
bad3b3d700
use the (existing) .cargo/audit.toml to ignore some rust advisories
2022-08-06 20:55:39 -04:00
Dustin J. Mitchell
72a8be3340
Update .github/workflows/security.yml
...
Co-authored-by: Tomas Babej <tomas@tbabej.com>
2022-07-24 16:46:45 -04:00
Dustin J. Mitchell
56ea105e25
Ignore RUSTSEC-2020-0071
...
See discussion at
https://github.com/taskchampion/taskchampion/issues/304 . Note that
RUSTSEC-2020-0159 is the same bug as RUSTSEC-2020-0071.
2022-07-24 16:46:45 -04:00
Dustin J. Mitchell
3aa14b3efc
ignore RUSTSEC-2021-0124
...
This is a vulnerability in tokio, which is required by Actix-web. For
the moment, ignore it, and then decide whether to upgrade actix to suit,
or switch to a different (simpler) web server package.
2022-07-24 16:46:45 -04:00
Dustin J. Mitchell
977ab11af2
Revert "temporarily remove cargo audit check"
...
This reverts commit 892efd0b13
.
2022-07-24 16:46:45 -04:00
Dustin J. Mitchell
d422db32ea
temporarily remove cargo audit check
2022-06-12 18:07:44 -04:00
Dustin J. Mitchell
085da00b0c
add write-all permission to the audit
2022-05-28 08:33:20 -04:00
Dustin J. Mitchell
9f5994bfd1
Update GitHub actions to work in Taskwarrior
...
This moves the workspace Cargo.toml to the root of the repository, so
that the "actions-rs/cargo" action can find it.
2022-05-08 20:06:05 +00:00