From 3bc4feb2ac9074dfdb3a4c41f023029fa7a0100a Mon Sep 17 00:00:00 2001 From: Stephan Dilly Date: Wed, 24 Nov 2021 13:53:21 +0100 Subject: [PATCH] enable but ignore certain audits --- .cargo/audit.toml | 6 ++++++ .github/workflows/ci.yml | 21 +++++++++------------ 2 files changed, 15 insertions(+), 12 deletions(-) create mode 100644 .cargo/audit.toml diff --git a/.cargo/audit.toml b/.cargo/audit.toml new file mode 100644 index 00000000..24a79c89 --- /dev/null +++ b/.cargo/audit.toml @@ -0,0 +1,6 @@ +[advisories] +ignore = [ + # see https://github.com/extrawurst/gitui/issues/951 + "RUSTSEC-2020-0159", + # see https://github.com/extrawurst/gitui/issues/950 + "RUSTSEC-2020-0071"] \ No newline at end of file diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4b49a8a7..a191d32f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -142,18 +142,15 @@ jobs: components: rustfmt - run: cargo fmt -- --check - # TODO: enable again once we have these two fixed: - # https://github.com/extrawurst/gitui/issues/950 - # https://github.com/extrawurst/gitui/issues/951 - # - # sec: - # name: Security audit - # runs-on: ubuntu-latest - # steps: - # - uses: actions/checkout@v2 - # - uses: actions-rs/audit-check@v1 - # with: - # token: ${{ secrets.GITHUB_TOKEN }} + + sec: + name: Security audit + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - uses: actions-rs/audit-check@v1 + with: + token: ${{ secrets.GITHUB_TOKEN }} log-test: name: Changelog Test