From 05bda908333b6a74798eafa64efa56fd4e8a9279 Mon Sep 17 00:00:00 2001 From: Martin Taibr Date: Tue, 16 Aug 2022 00:48:42 +0200 Subject: [PATCH] Update cargo audit CI One new ignore, remove 3 existing ones. I updated the tracking issue - more details there: https://github.com/FyroxEngine/Fyrox/issues/208 --- .github/workflows/audit.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index f6db986e0..abe0e07b2 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -27,9 +27,7 @@ jobs: - run: rustup update - run: cargo audit --version # RUSTSEC-2020-0016: net2 is unmaintained - fixed in notify 5.0 prerelease, waiting for release - # RUSTSEC-2020-0056: stdweb is unmaintained - should be safe to ignore until stdweb is removed from instant # RUSTSEC-2020-0097: xcb - Soundness issue with base::Error - # RUSTSEC-2021-0019: xcb - Multiple soundness issues - # RUSTSEC-2021-0119: nix - Out-of-bounds write in nix::unistd::getgrouplist - waiting for new winit release + # RUSTSEC-2022-0048: xml-rs is Unmaintained # For more info: https://github.com/FyroxEngine/Fyrox/issues/208 - - run: cargo audit --deny warnings --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2020-0056 --ignore RUSTSEC-2020-0097 --ignore RUSTSEC-2021-0019 --ignore RUSTSEC-2021-0119 + - run: cargo audit --deny warnings --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2020-0097 --ignore RUSTSEC-2022-0048