Add `make audit` target running `cargo audit` with an advisory ignore for RUSTSEC-2025-0141 (bincode, tracked by #636). Wire audit into `make pre-pr` and `make pre-pr-server`. Add conditional cargo audit to the pre-commit hook (triggers only when Cargo.toml/Cargo.lock are staged). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
10 lines
397 B
TOML
10 lines
397 B
TOML
# cargo audit configuration for settled-reach-server.
|
|
# Known advisories that are tracked but not yet resolved are listed here.
|
|
# New advisories NOT in this list will fail CI.
|
|
|
|
[advisories]
|
|
# RUSTSEC-2025-0141: bincode v1.3.3 is unmaintained.
|
|
# Migration to bincode v2 or an alternative is tracked in ticket #636.
|
|
# This ignore can be removed once #636 is resolved.
|
|
ignore = ["RUSTSEC-2025-0141"]
|