Skip to content
This repository was archived by the owner on Mar 11, 2025. It is now read-only.

Commit 17880f9

Browse files
authored
ci: Add tonic to audit ignore (#7322)
#### Problem Similar to anza-xyz/agave#3052, we need to ignore the RUSTSEC advisory on tonic until it's resolved upstream. #### Summary of changes Ignore the tonic advisory.
1 parent 3280249 commit 17880f9

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

ci/do-audit.sh

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,5 +14,14 @@ cargo_audit_ignores=(
1414
#
1515
# Remove once SPL upgrades to curve25519-dalek v4
1616
--ignore RUSTSEC-2024-0344
17+
18+
# Crate: tonic
19+
# Version: 0.9.2
20+
# Title: Remotely exploitable Denial of Service in Tonic
21+
# Date: 2024-10-01
22+
# ID: RUSTSEC-2024-0376
23+
# URL: https://rustsec.org/advisories/RUSTSEC-2024-0376
24+
# Solution: Upgrade to >=0.12.3
25+
--ignore RUSTSEC-2024-0376
1726
)
1827
cargo +"$rust_stable" audit "${cargo_audit_ignores[@]}"

0 commit comments

Comments
 (0)