use the (existing) .cargo/audit.toml to ignore some rust advisories

djmitche · Aug 7, 2022 · bad3b3d · bad3b3d
1 parent 152db46
commit bad3b3d
Show file tree

Hide file tree

Showing 3 changed files with 1 addition and 1 deletion.
diff --git a/taskchampion/.cargo/audit.toml → .cargo/audit.toml b/taskchampion/.cargo/audit.toml → .cargo/audit.toml
@@ -1,5 +1,6 @@
 [advisories]
 ignore = [
+    "RUSTSEC-2021-0124", # see https://github.com/GothenburgBitFactory/taskwarrior/issues/2830
     "RUSTSEC-2020-0159", # segfault in localtime_r - low risk to TC
     "RUSTSEC-2020-0071", # same localtime_r bug as above
 ]
diff --git a/taskchampion/.cargo/config → .cargo/config b/taskchampion/.cargo/config → .cargo/config
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -17,5 +17,4 @@ jobs:
       - uses: actions/checkout@v2
       - uses: GothenburgBitFactory/audit-check@master
         with:
-          ignore: RUSTSEC-2021-0124, RUSTSEC-2020-0071
           token: ${{ secrets.GITHUB_TOKEN }}