add more comment

anza-xyz · Oct 2, 2024 · 349f83f · 349f83f
1 parent 55598e7
commit 349f83f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/ci/do-audit.sh b/ci/do-audit.sh
@@ -35,6 +35,9 @@ cargo_audit_ignores=(
   --ignore RUSTSEC-2024-0344
 
   # tonic
+  # When using tonic::transport::Server there is a remote DoS attack that can cause
+  # the server to exit cleanly on accepting a tcp/tls stream.
+  # Ignoring because we do not use this functionality.
   --ignore RUSTSEC-2024-0376
 )
 scripts/cargo-for-all-lock-files.sh audit "${cargo_audit_ignores[@]}" | $dep_tree_filter