From 98ebf487d813caa4749c2bd8ba84a42975af7d5e Mon Sep 17 00:00:00 2001 From: Tobias Bieniek Date: Sat, 22 Feb 2025 10:56:00 +0100 Subject: [PATCH] cargo-deny: Ignore `ring` maintenance advisory As the code comment says, we are aware, but there is not much we can do about it from our side at the moment. --- deny.toml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/deny.toml b/deny.toml index 87142b50616..1bf5bd69303 100644 --- a/deny.toml +++ b/deny.toml @@ -68,7 +68,9 @@ db-urls = ["https://github.com/rustsec/advisory-db"] # A list of advisory IDs to ignore. Note that ignored advisories will still # output a note when they are encountered. ignore = [ - #"RUSTSEC-0000-0000", + # "ring is unmaintained" – we are aware, but there is not much we can do + # about it on our side for now :-/ + "RUSTSEC-2025-0007", ] # Threshold for security vulnerabilities, any vulnerability with a CVSS score # lower than the range specified will be ignored. Note that ignored advisories