diff options
| author | Linus Färnstrand <faern@faern.net> | 2023-01-31 10:44:50 +0100 |
|---|---|---|
| committer | Linus Färnstrand <faern@faern.net> | 2023-02-01 10:23:18 +0100 |
| commit | 1ffe90474d7568515756f6510e53b32215d7ccfd (patch) | |
| tree | b1a796b66c00cd674ee4483257f9e47dcccf5738 /.github | |
| parent | cc6b616ddf3b0fa2ef5253570591284d0f795ba0 (diff) | |
| download | mullvadvpn-1ffe90474d7568515756f6510e53b32215d7ccfd.tar.xz mullvadvpn-1ffe90474d7568515756f6510e53b32215d7ccfd.zip | |
Deny warnings in `cargo audit` CI job
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/cargo-audit.yml | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml index d7531c53af..1cc67cf5e8 100644 --- a/.github/workflows/cargo-audit.yml +++ b/.github/workflows/cargo-audit.yml @@ -34,9 +34,13 @@ jobs: - name: Audit # RUSTSEC-2020-0071: Ignore the time segfault CVE since there are no known # good workarounds, and we want logs etc to be in local time. + # # RUSTSEC-2021-0145: The vulnerability affects custom global allocators, # so it should be safe to ignore it. Stop ignoring the warning once # atty has been replaced in clap and env_logger: # https://github.com/clap-rs/clap/pull/4249 # https://github.com/rust-cli/env_logger/pull/246 - run: cargo audit --ignore RUSTSEC-2020-0071 --ignore RUSTSEC-2021-0145 + run: | + cargo audit --deny warnings \ + --ignore RUSTSEC-2020-0071 \ + --ignore RUSTSEC-2021-0145 |