Suppress known audit warnings that we mitigate. (#589)

### What Suppress a couple of audit warnings. ### How I have added a `.cargo/audit.toml` file.
hasura · Aug 22, 2024 · 4eb0b32 · 4eb0b32
1 parent 12dcf37
commit 4eb0b32
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -0,0 +1,9 @@
+[advisories]
+ignore = [
+  # `cargo audit` thinks we depend on `sqlx-mysql` and therefore `rsa`.
+  # We do not, as we do not enable the "mysql" feature for `sqlx`.
+  "RUSTSEC-2023-0071",
+  # `sqlx` may interpret a value larger than 4 GB as commands..
+  # We mitigate this by limiting the size of the request.
+  "RUSTSEC-2024-0363",
+]
diff --git a/flake.nix b/flake.nix
@@ -110,6 +110,7 @@
               pkgs.moreutils
 
               # Rust
+              pkgs.cargo-audit
               pkgs.cargo-edit
               pkgs.cargo-expand
               pkgs.cargo-flamegraph