# Cargo audit configuration
# https://docs.rs/cargo-audit/latest/cargo_audit/

[advisories]
# Ignore advisories for unmaintained crates that have no alternatives
ignore = [
    # atty - unmaintained but widely used, replacement (is-terminal) requires code changes
    "RUSTSEC-2021-0145",
    "RUSTSEC-2024-0375",

    # atomic-polyfill - unmaintained, comes from surrealdb dependency
    "RUSTSEC-2023-0089",

    # paste - unmaintained, comes from multiple dependencies (ratatui, nickel)
    "RUSTSEC-2024-0436",

    # rustls-pemfile - FIXED by updating reqwest to v0.12.28
    # "RUSTSEC-2025-0134",

    # yaml-rust - unmaintained, comes from nickel-lang-core
    "RUSTSEC-2024-0320",
]

[database]
# Path to the advisory database
path = "~/.cargo/advisory-db"

# URL to the advisory database git repo
url = "https://github.com/RustSec/advisory-db"

# Fetch latest advisories on each run
stale = false