From 85c1fe38decb0b47099704c34514ff105b2f3cef Mon Sep 17 00:00:00 2001 From: Trent Nelson <490004+t-nelson@users.noreply.github.com> Date: Tue, 23 Apr 2024 20:41:40 -0600 Subject: [PATCH] ci: ignore RUSTSEC-2024-0336 -- v1.17 (#1016) vuln is against rustls servers. our only non-client-side usage is in quinn, which does not call the affected function --- ci/do-audit.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ci/do-audit.sh b/ci/do-audit.sh index 0118c84c5f0fec..56e6d569344e4b 100755 --- a/ci/do-audit.sh +++ b/ci/do-audit.sh @@ -33,6 +33,9 @@ cargo_audit_ignores=( # mio --ignore RUSTSEC-2024-0019 + + # rustls -- complete_io + --ignore RUSTSEC-2024-0336 ) scripts/cargo-for-all-lock-files.sh audit "${cargo_audit_ignores[@]}" | $dep_tree_filter # we want the `cargo audit` exit code, not `$dep_tree_filter`'s