33 lines
915 B
TOML
33 lines
915 B
TOML
|
# Cargo audit configuration
|
||
|
|
# https://docs.rs/cargo-audit/latest/cargo_audit/
|
||
|
|
|
||
|
|
[advisories]
|
||
|
|
# Ignore advisories for unmaintained crates that have no alternatives
|
||
|
|
ignore = [
|
||
|
|
# atty - unmaintained but widely used, replacement (is-terminal) requires code changes
|
||
|
|
"RUSTSEC-2021-0145",
|
||
|
|
"RUSTSEC-2024-0375",
|
||
|
|
|
||
|
|
# atomic-polyfill - unmaintained, comes from surrealdb dependency
|
||
|
|
"RUSTSEC-2023-0089",
|
||
|
|
|
||
|
|
# paste - unmaintained, comes from multiple dependencies (ratatui, nickel)
|
||
|
|
"RUSTSEC-2024-0436",
|
||
|
|
|
||
|
|
# rustls-pemfile - FIXED by updating reqwest to v0.12.28
|
||
|
|
# "RUSTSEC-2025-0134",
|
||
|
|
|
||
|
|
# yaml-rust - unmaintained, comes from nickel-lang-core
|
||
|
|
"RUSTSEC-2024-0320",
|
||
|
|
]
|
||
|
|
|
||
|
|
[database]
|
||
|
|
# Path to the advisory database
|
||
|
|
path = "~/.cargo/advisory-db"
|
||
|
|
|
||
|
|
# URL to the advisory database git repo
|
||
|
|
url = "https://github.com/RustSec/advisory-db"
|
||
|
|
|
||
|
|
# Fetch latest advisories on each run
|
||
|
|
stale = false
|