mirror of
https://github.com/block/goose.git
synced 2026-04-26 10:40:45 +00:00
583acd4335
Signed-off-by: Michael Neale <michael.neale@gmail.com> Co-authored-by: Michael Neale <michael.neale@gmail.com> continuing migration to aaif
13 lines
455 B
TOML
13 lines
455 B
TOML
[advisories]
|
|
|
|
# Deny yanked crates to catch supply chain issues early.
|
|
yanked = "deny"
|
|
# Emulate cargo-audit which only checks vulnerabilities and yanked crates, not unmaintained/unsound.
|
|
unmaintained = "none"
|
|
unsound = "none"
|
|
|
|
# Ignore proc-macro-error unmaintained warning
|
|
# See: https://github.com/aaif-goose/goose/issues/7008
|
|
ignore = [
|
|
"RUSTSEC-2023-0071", # rsa: Marvin Attack timing sidechannel (no safe upgrade available, via jsonwebtoken)
|
|
]
|