Skip to content
This repository was archived by the owner on Jan 22, 2025. It is now read-only.

Commit 30cf4f7

Browse files
mergify[bot]yihauwillhickey
committed
v1.18: ci: ignore the tonic audit as a temporary stopgap (backport of #3052) (#3062)
* ci: ignore the tonic audit as a temporary stopgap (#3052) (cherry picked from commit 9b5525d) # Conflicts: # ci/do-audit.sh * Fix conflicts * Update to mimic v2.0 change --------- Co-authored-by: Yihau Chen <[email protected]> Co-authored-by: WillHickey <[email protected]>
1 parent 38f0234 commit 30cf4f7

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

Diff for: ci/do-audit.sh

+6
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,12 @@ cargo_audit_ignores=(
4141

4242
# openssl
4343
--ignore RUSTSEC-2024-0357
44+
45+
# tonic
46+
# When using tonic::transport::Server there is a remote DoS attack that can cause
47+
# the server to exit cleanly on accepting a tcp/tls stream.
48+
# Ignoring because we do not use this functionality.
49+
--ignore RUSTSEC-2024-0376
4450
)
4551
scripts/cargo-for-all-lock-files.sh audit "${cargo_audit_ignores[@]}" | $dep_tree_filter
4652
# we want the `cargo audit` exit code, not `$dep_tree_filter`'s

0 commit comments

Comments
 (0)