# Cargo audit configuration
# https://docs.rs/cargo-audit/latest/cargo_audit/

[advisories]
# Ignore advisories for unmaintained crates that have no alternatives
ignore = [
  # atty - unmaintained but widely used, replacement (is-terminal) requires code changes
  "RUSTSEC-2021-0145",
  "RUSTSEC-2024-0375",

  # atomic-polyfill - unmaintained, comes from surrealdb dependency
  "RUSTSEC-2023-0089",

  # paste - unmaintained, comes from multiple dependencies (ratatui, nickel)
  "RUSTSEC-2024-0436",

  # rustls-pemfile - FIXED by updating reqwest to v0.12.28
  # "RUSTSEC-2025-0134",

  # yaml-rust - unmaintained, comes from nickel-lang-core
  "RUSTSEC-2024-0320",
]

[database]
# Path to the advisory database
path = "~/.cargo/advisory-db"

# URL to the advisory database git repo
url = "https://github.com/RustSec/advisory-db"

# Fetch latest advisories on each run
stale = false
