Update cargo audit

huggingface · Oct 5, 2023 · 4e2283b · 4e2283b
1 parent d99b277
commit 4e2283b
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 12 deletions.
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
@@ -54,7 +54,7 @@ jobs:
         os: [ubuntu-latest, macos-latest]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2
 
 
       - name: Install Rust
@@ -70,11 +70,11 @@ jobs:
           architecture: "x64"
 
 
-      - name: Cache Cargo Registry
-        uses: actions/cache@v1
-        with:
-          path: ~/.cargo/registry
-          key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
+          # - name: Cache Cargo Registry
+          #   uses: actions/cache@v1
+          #   with:
+          #     path: ~/.cargo/registry
+          #     key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
 
           # - name: Cache Cargo Build Target
           #   uses: actions/cache@v1
@@ -99,9 +99,7 @@ jobs:
         uses: actions-rs/cargo@v1
         with:
           command: audit
-          # ignoring specific CVE which probably isn't affecting this crate
-          # https://github.com/chronotope/chrono/issues/602
-          args: -D warnings -f ./bindings/python/Cargo.lock --ignore RUSTSEC-2020-0071 --ignore RUSTSEC-2021-0145
+          args: -D warnings -f ./bindings/python/Cargo.lock
 
       - name: Install
         working-directory: ./bindings/python

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
@@ -85,9 +85,7 @@ jobs:
         uses: actions-rs/cargo@v1
         with:
           command: audit
-          # ignoring specific CVE which probably isn't affecting this crate
-          # https://github.com/chronotope/chrono/issues/602
-          args: -D warnings -f ./tokenizers/Cargo.lock --ignore RUSTSEC-2020-0071 --ignore RUSTSEC-2021-0145
+          args: -D warnings -f ./tokenizers/Cargo.lock
 
       # Verify that Readme.md is up to date.
       - name: Make sure, Readme generated from lib.rs matches actual Readme