rustic icon indicating copy to clipboard operation
rustic copied to clipboard

add rust audit

Open aawsome opened this issue 3 years ago • 3 comments

currently failing due to security issue in chrono (fixed in unreleased version 0.4.20), see https://github.com/chronotope/chrono/issues/602

aawsome avatar Jun 13 '22 20:06 aawsome

I think you could skip this check by adding args: --ignore RUSTSEC-2020-0071.

dimejo avatar Jun 17 '22 14:06 dimejo

Seems like actions-rs/audit-check@v1 doesn't support adding custom args, unfortunately. I suggest waiting for chrono 0.4.20

aawsome avatar Jun 19 '22 14:06 aawsome

Now chrono 0.4.20 is out. But cargo audit still claims the dependency on time which doesn't seem to be removed. So, we wait a bit more for what's happening...

BTW: The other finding is a warning about term being unmaintained. This should be fixed once #42 is addressed.

aawsome avatar Aug 08 '22 18:08 aawsome