Ok, just ignore all current cargo audit advisories

We know about them, there's no point failing all CI because of them. Tracking issue: FyroxEngine#208
martin-t · Oct 22, 2021 · f313b06 · f313b06
1 parent 87e6869
commit f313b06
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
@@ -25,6 +25,9 @@ jobs:
           crate: cargo-audit
           version: latest
       - run: cargo audit --version
-      # RUSTSEC-2020-0016: net2 is unmaintained - fixed in notify 5.0 prerelease, waiting for release - https://github.com/rg3dengine/rg3d/issues/208
-      # RUSTSEC-2020-0056: stdweb is unmaintained - https://github.com/rg3dengine/rg3d/issues/208
-      - run: cargo audit --deny warnings --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2020-0056
+      # RUSTSEC-2020-0016: net2 is unmaintained - fixed in notify 5.0 prerelease, waiting for release
+      # RUSTSEC-2020-0056: stdweb is unmaintained - should be safe to ignore until stdweb is removed from instant
+      # RUSTSEC-2021-0019: xcb - Multiple soundness issues
+      # RUSTSEC-2021-0119: nix - Out-of-bounds write in nix::unistd::getgrouplist - waiting for new winit release
+      # For more info: https://github.com/rg3dengine/rg3d/issues/208
+      - run: cargo audit --deny warnings --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2020-0056 --ignore RUSTSEC-2021-0019 --ignore RUSTSEC-2021-0119