diff --git a/.cargo/audit.toml b/.cargo/audit.toml new file mode 100644 index 00000000..342aa88d --- /dev/null +++ b/.cargo/audit.toml @@ -0,0 +1,9 @@ +[advisories] +ignore = [ + # This is a vuln on RSA. RSA is in our lockfile, but not in cargo-tree. + # It is a issue with sqlx/cargo, and does not affect Atuin. + # See: + # - https://github.com/launchbadge/sqlx/issues/3211 + # - https://github.com/rust-lang/cargo/issues/10801 + "RUSTSEC-2023-0071" +]