rustsec icon indicating copy to clipboard operation
rustsec copied to clipboard

Stop requiring the latest git commit in advisory-db to be signed

Open Shnatsel opened this issue 3 years ago • 0 comments
trafficstars

We currently require the presence of some signature on the latest commit in advisory-db repo for cargo audit and other tooling that uses rustsec crate to work.

This is completely useless in that it doesn't add any security. And it has broken production users twice now (both times for just a few minutes before it was noticed and fixed, but still).

We should disable that check.

Shnatsel avatar Aug 04 '22 18:08 Shnatsel