File tree Expand file tree Collapse file tree 2 files changed +23
-1
lines changed Expand file tree Collapse file tree 2 files changed +23
-1
lines changed Original file line number Diff line number Diff line change @@ -9,6 +9,27 @@ targets = [
99
1010[advisories ]
1111yanked  = " deny" 
12+ ignore  = [
13+     #  https://rustsec.org/advisories/RUSTSEC-2023-0071
14+     #  "rsa" crate: Marvin Attack: potential key recovery through timing sidechannel
15+     # 
16+     #  No patch is yet available, however work is underway to migrate to a fully constant-time implementation
17+     #  So we need to accept this, as of SDP 24.11 we are not using the rsa crate to create certificates used in production
18+     #  setups.
19+     # 
20+     #  TODO: Remove after https://github.com/RustCrypto/RSA/pull/394 is merged
21+     " RUSTSEC-2023-0071" 
22+ 
23+     #  https://rustsec.org/advisories/RUSTSEC-2024-0384
24+     #  "instant" is unmaintained
25+     # 
26+     #  The upstream "kube" crate also silenced this in https://github.com/kube-rs/kube/commit/4f1e889f265da8f19f03f60683569cae1a154fda
27+     #  They/we are actively working on migrating kube from backoff to backon, which removes the transitive dependency on
28+     #  instant, in https://github.com/kube-rs/kube/pull/1652.
29+     # 
30+     #  TODO: Remove after https://github.com/kube-rs/kube/pull/1652 is merged
31+     " RUSTSEC-2024-0384" 
32+ ]
1233
1334[bans ]
1435multiple-versions  = " allow" 
@@ -26,6 +47,7 @@ allow = [
2647    " LicenseRef-webpki" 
2748    " MIT" 
2849    " MPL-2.0" 
50+     " OpenSSL" #  Needed for the ring and/or aws-lc-sys crate. See https://github.com/stackabletech/operator-templating/pull/464 for details
2951    " Unicode-3.0" 
3052    " Unicode-DFS-2016" 
3153    " Zlib" 
Original file line number Diff line number Diff line change 2121if  !  command  -v jinja2 & >  /dev/null
2222then 
2323  echo  " jinja2 could not be found. Use 'pip install jinja2-cli' to install it." 
24-   exit 
24+   exit  1 
2525fi 
2626
2727#  Check if templating vars file exists
 
 
   
 
     
   
   
          
    
    
     
    
      
     
     
    You can’t perform that action at this time.
  
 
    
  
    
      
        
     
       
      
     
   
 
    
    
  
 
  
 
     
    
0 commit comments