gitops/optimclaw
1
0
Fork 0
mirror of https://github.com/outbackdingo/optimclaw.git synced 2026-08-25 14:53:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: ignore pre-existing advisories in deny.toml with justification

Browse Source 
Add known RUSTSEC IDs to the ignore list so cargo-deny CI passes.
Each advisory is documented with mitigation context. Dependency
upgrades to resolve these should be tracked separately.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
This commit is contained in:
[email protected]
2026-03-10 00:23:50 -07:00
co-authored by Claude Opus 4.6
parent 6b3fcabad2
commit c7f6fbc161
1 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deny.toml
+13 -1
View File
@@ -5,7 +5,19 @@ targets = []
unmaintained = "workspace"
yanked = "deny"
ignore = [
# Add specific RUSTSEC IDs with justification comments as needed
# Pre-existing advisories — tracked for upgrade in separate PRs
# serde_yml unsound/unmaintained — transitive dep, no direct usage
"RUSTSEC-2025-0068",
# tokio-tar PAX header parsing — sandbox containers only
"RUSTSEC-2025-0111",
# wasmtime fd_renumber host panic — WASIp1, mitigated by fuel limits
"RUSTSEC-2025-0046",
# wasmtime shared linear memory unsoundness — no shared memory in our guests
"RUSTSEC-2025-0118",
# wasmtime guest-controlled resource exhaustion — mitigated by fuel/memory limits
"RUSTSEC-2026-0020",
# wasmtime wasi:http/types.fields panic — mitigated by fuel limits
"RUSTSEC-2026-0021",
]
[licenses]