ignore security alert for libgit2

syphar · syphar · commit 126879d76363 · 2024-02-11T12:54:13.000+01:00
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -7,6 +7,9 @@ ignore = [
     # https://github.com/rust-lang/docs.rs/issues/2074
 
     "RUSTSEC-2023-0071", # potential key recovery through timing sidechannels
+
+    "RUSTSEC-2024-0013", # Memory corruption, denial of service, and arbitrary code execution in libgit2
+    # https://github.com/rust-lang/docs.rs/issues/2414
 ]
 informational_warnings = ["unmaintained"] # warn for categories of informational advisories
 severity_threshold = "low" # CVSS severity ("none", "low", "medium", "high", "critical")

Original file line number	Diff line number	Diff line change
`@@ -7,6 +7,9 @@ ignore = [`
`7`	`7`	`# https://github.com/rust-lang/docs.rs/issues/2074`
`8`	`8`
`9`	`9`	`"RUSTSEC-2023-0071", # potential key recovery through timing sidechannels`
	`10`	`+`
	`11`	`+ "RUSTSEC-2024-0013", # Memory corruption, denial of service, and arbitrary code execution in libgit2`
	`12`	`+ # https://github.com/rust-lang/docs.rs/issues/2414`
`10`	`13`	`]`
`11`	`14`	`informational_warnings = ["unmaintained"] # warn for categories of informational advisories`
`12`	`15`	`severity_threshold = "low" # CVSS severity ("none", "low", "medium", "high", "critical")`