2025-12-24 03:26:41 +00:00
|
|
|
# Cargo audit configuration
|
|
|
|
|
# https://docs.rs/cargo-audit/latest/cargo_audit/
|
|
|
|
|
|
|
|
|
|
[advisories]
|
|
|
|
|
# Ignore advisories for unmaintained crates that have no alternatives
|
|
|
|
|
ignore = [
|
|
|
|
|
# atty - unmaintained but widely used, replacement (is-terminal) requires code changes
|
|
|
|
|
"RUSTSEC-2021-0145",
|
|
|
|
|
"RUSTSEC-2024-0375",
|
2025-12-25 22:59:45 +00:00
|
|
|
|
2025-12-24 03:26:41 +00:00
|
|
|
# atomic-polyfill - unmaintained, comes from surrealdb dependency
|
|
|
|
|
"RUSTSEC-2023-0089",
|
2025-12-25 22:59:45 +00:00
|
|
|
|
2025-12-24 03:26:41 +00:00
|
|
|
# paste - unmaintained, comes from multiple dependencies (ratatui, nickel)
|
|
|
|
|
"RUSTSEC-2024-0436",
|
|
|
|
|
|
|
|
|
|
# rustls-pemfile - FIXED by updating reqwest to v0.12.28
|
|
|
|
|
# "RUSTSEC-2025-0134",
|
|
|
|
|
|
|
|
|
|
# yaml-rust - unmaintained, comes from nickel-lang-core
|
|
|
|
|
"RUSTSEC-2024-0320",
|
|
|
|
|
]
|
|
|
|
|
|
|
|
|
|
[database]
|
|
|
|
|
# Path to the advisory database
|
|
|
|
|
path = "~/.cargo/advisory-db"
|
|
|
|
|
|
|
|
|
|
# URL to the advisory database git repo
|
|
|
|
|
url = "https://github.com/RustSec/advisory-db"
|
|
|
|
|
|
|
|
|
|
# Fetch latest advisories on each run
|
|
|
|
|
stale = false
|