Add Cargo dependency audit gates

This commit is contained in:
Georg Bauer
2026-08-31 14:26:51 +02:00
parent 115737302b
commit 2c2c3702b0
5 changed files with 59 additions and 2 deletions

View File

@@ -9,3 +9,19 @@ reason = "INFO Unmaintained with no patched version; transitive through Iced 0.1
[[IgnoredVulns]]
id = "RUSTSEC-2026-0192"
reason = "INFO Unmaintained with no patched version; transitive through Iced 0.14's text and SVG renderers."
[[IgnoredVulns]]
id = "RUSTSEC-2026-0253"
reason = "No compatible Iced 0.14 upgrade; Cryoglyph does not call the affected LruCache::pop API."
[[IgnoredVulns]]
id = "RUSTSEC-2023-0071"
reason = "No patched rsa release; the release packager only creates ad-hoc signatures without RSA keys."
[[IgnoredVulns]]
id = "RUSTSEC-2020-0095"
reason = "INFO Unmaintained with no patched version; release-only transitive dependency through apple-codesign."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0134"
reason = "INFO Unmaintained with no patched version; transitive through apple-codesign's unused remote-signing stack."