Add Cargo dependency audit gates
This commit is contained in:
@@ -9,3 +9,19 @@ reason = "INFO Unmaintained with no patched version; transitive through Iced 0.1
|
||||
[[IgnoredVulns]]
|
||||
id = "RUSTSEC-2026-0192"
|
||||
reason = "INFO Unmaintained with no patched version; transitive through Iced 0.14's text and SVG renderers."
|
||||
|
||||
[[IgnoredVulns]]
|
||||
id = "RUSTSEC-2026-0253"
|
||||
reason = "No compatible Iced 0.14 upgrade; Cryoglyph does not call the affected LruCache::pop API."
|
||||
|
||||
[[IgnoredVulns]]
|
||||
id = "RUSTSEC-2023-0071"
|
||||
reason = "No patched rsa release; the release packager only creates ad-hoc signatures without RSA keys."
|
||||
|
||||
[[IgnoredVulns]]
|
||||
id = "RUSTSEC-2020-0095"
|
||||
reason = "INFO Unmaintained with no patched version; release-only transitive dependency through apple-codesign."
|
||||
|
||||
[[IgnoredVulns]]
|
||||
id = "RUSTSEC-2025-0134"
|
||||
reason = "INFO Unmaintained with no patched version; transitive through apple-codesign's unused remote-signing stack."
|
||||
|
||||
Reference in New Issue
Block a user