From f229ced40e11d9c9a24d35126a200b17aa176c03 Mon Sep 17 00:00:00 2001 From: Quentin Gliech Date: Mon, 25 Mar 2024 10:38:27 +0100 Subject: [PATCH] Ignore RUSTSEC-2024-0320 as we don't use the unmaintained crate in production --- deny.toml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/deny.toml b/deny.toml index dd826892..1bc6fa8a 100644 --- a/deny.toml +++ b/deny.toml @@ -17,7 +17,10 @@ ignore = [ # RSA key extraction "Marvin Attack". This is only relevant when using # PKCS#1 v1.5 encryption, which we don't - "RUSTSEC-2023-0071" + "RUSTSEC-2023-0071", + + # yaml-rust is unmaintained, and used by insta, which isn't a production dependency + "RUSTSEC-2024-0320", ] [licenses]