da7971a chore: add cargo audit — radicle-ci-broker

Radicle CI broker

chore: add cargo audit

✗ CI failure Fintan Halpenny committed 1 year ago

commit da7971ada31b9684abe6182429eb3f7488d5d13c
parent 8d67442766386b1ff17457de3a118a602433506a

2 failed (2 total) View logs

2 files changed +12 -0

added .cargo/audit.toml

@@ -0,0 +1,7 @@

 [advisories]
 ignore = [
   # heartwood issue bd8af7a5e3fd02c0963d7550a5cc2cab00950775
   # TL;DR rsa is vulnerable, but heartwood does not use the rsa crate, even
   # through the transitivie dependency
   "RUSTSEC-2023-0071",
 ]

modified flake.nix

@@ -156,6 +156,10 @@

         fmt = craneLib.cargoFmt basicArgs;
         deny = craneLib.cargoDeny commonArgs;
         audit = craneLib.cargoAudit {
           inherit src advisory-db;
         };
         # Run tests with cargo-nextest
         nextest = craneLib.cargoNextest (commonArgs
           // {

@@ -213,3 +217,4 @@

       };
     });
 }