hugo/RuDS
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Temporarily ignore unavoidable OSV advisories.
All checks were successful
Weekly OSV dependency audit / dependency-audit (push) Successful in 6s
Details

Browse Source
This commit is contained in:
Chili Palmer
2026-08-09 17:58:30 +02:00
parent 520e1d86ea
commit 20f9d15b46
1 changed files with 87 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

87
osv-scanner.toml Normal file
View File

@@ -0,0 +1,87 @@
# Temporary exceptions for advisories without a deployable upgrade path.
# They expire together so the weekly audit forces a fresh upstream review.
[[IgnoredVulns]]
id = "RUSTSEC-2024-0413"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0416"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0412"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0418"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0417"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0414"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0429"
ignoreUntil = 2026-11-09
reason = "glib 0.20 cannot be selected independently while current muda and wry releases require GTK3 0.18."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0415"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0420"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0419"
ignoreUntil = 2026-11-09
reason = "Current muda and wry releases still depend on the unmaintained GTK3 stack on Linux."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0141"
ignoreUntil = 2026-11-09
reason = "Current syntect still depends on bincode 1, for which no patched release is available."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0370"
ignoreUntil = 2026-11-09
reason = "Current GTK3 macros and pagefind dependencies still require proc-macro-error 1."
[[IgnoredVulns]]
id = "RUSTSEC-2023-0071"
ignoreUntil = 2026-11-09
reason = "Current russh and ssh-key require this rsa release and no patched release is available."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0436"
ignoreUntil = 2026-11-09
reason = "Current graphics and ML dependencies still require paste and no patched release is available."
[[IgnoredVulns]]
id = "RUSTSEC-2026-0206"
ignoreUntil = 2026-11-09
reason = "Current iced and cosmic-text releases still require rustybuzz and no patched release is available."
[[IgnoredVulns]]
id = "RUSTSEC-2026-0192"
ignoreUntil = 2026-11-09
reason = "Current iced and cosmic-text releases still require ttf-parser and no patched release is available."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0320"
ignoreUntil = 2026-11-09
reason = "Current syntect and pagefind dependencies still require yaml-rust and no patched release is available."