From 3aa14b3efcc9e370e569754d075ce58b55398e05 Mon Sep 17 00:00:00 2001 From: "Dustin J. Mitchell" Date: Mon, 11 Jul 2022 00:35:57 +0000 Subject: [PATCH] ignore RUSTSEC-2021-0124 This is a vulnerability in tokio, which is required by Actix-web. For the moment, ignore it, and then decide whether to upgrade actix to suit, or switch to a different (simpler) web server package. --- .github/workflows/security.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 60639fbba..e9534dbc8 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -15,6 +15,7 @@ jobs: name: "Audit Dependencies" steps: - uses: actions/checkout@v2 - - uses: actions-rs/audit-check@v1 + - uses: GothenburgBitFactory/audit-check@master with: + ignore: RUSTSEC-2021-0124 token: ${{ secrets.GITHUB_TOKEN }}