Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 15 additions & 15 deletions .cargo/audit.toml
Original file line number Diff line number Diff line change
Expand Up @@ -6,21 +6,21 @@

[advisories]
ignore = [
# rsa 0.9.x: timing-sidechannel ("Marvin Attack") in RSA-PKCS#1v1.5 decrypt.
# Reaches us via sqlx-mysql, which is pulled in by sqlx's `macros` feature
# (the proc-macro support needs to know every backend's SQL dialect at
# compile time, even when only the sqlite backend is enabled at runtime).
# Our daemon never opens a MySQL connection -> the vulnerable code path is
# dead at runtime. Track upstream sqlx for a backend-scoped macros feature.
"RUSTSEC-2023-0071",
# rsa 0.9.x: timing-sidechannel ("Marvin Attack") in RSA-PKCS#1v1.5 decrypt.
# Reaches us via sqlx-mysql, which is pulled in by sqlx's `macros` feature
# (the proc-macro support needs to know every backend's SQL dialect at
# compile time, even when only the sqlite backend is enabled at runtime).
# Our daemon never opens a MySQL connection -> the vulnerable code path is
# dead at runtime. Track upstream sqlx for a backend-scoped macros feature.
"RUSTSEC-2023-0071",

# paste 1.0.15: unmaintained warning. Transitive via ratatui 0.29 for
# internal macro-by-example helpers. Not a CVE, not a soundness issue.
# Drop once ratatui releases a version that removes the paste dep.
"RUSTSEC-2024-0436",
# paste 1.0.15: unmaintained warning. Transitive via ratatui 0.29 for
# internal macro-by-example helpers. Not a CVE, not a soundness issue.
# Drop once ratatui releases a version that removes the paste dep.
"RUSTSEC-2024-0436",

# lru 0.12.5: unsoundness in `IterMut`. ratatui uses lru as a cell cache
# but does not invoke `IterMut`; the unsound code path is not reachable
# through our usage. Drop once ratatui depends on lru >= 0.13.
"RUSTSEC-2026-0002",
# lru 0.12.5: unsoundness in `IterMut`. ratatui uses lru as a cell cache
# but does not invoke `IterMut`; the unsound code path is not reachable
# through our usage. Drop once ratatui depends on lru >= 0.13.
"RUSTSEC-2026-0002",
]
3 changes: 1 addition & 2 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,9 @@ on:
- master
tags:
- v?[0-9]+.[0-9]+.[0-9]+*

concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true

jobs:
DeterminateCI:
uses: DeterminateSystems/ci/.github/workflows/workflow.yml@main
Expand All @@ -20,3 +18,4 @@ jobs:
contents: read
with:
visibility: public
fail-fast: false
2 changes: 2 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -32,3 +32,5 @@ result-*

__pycache__
*.pyc

objects
Loading
Loading