diff --git a/.cargo/audit.toml b/.cargo/audit.toml new file mode 100644 index 0000000000..c5ebfdba43 --- /dev/null +++ b/.cargo/audit.toml @@ -0,0 +1,7 @@ +[advisories] +ignore = [ + # `atty` is a dependency of structopt and only used in s2n-quic-qns and s2n-quic-sim + "RUSTSEC-2021-0145", + # `atty` is a dependency of structopt and only used in s2n-quic-qns and s2n-quic-sim + "RUSTSEC-2024-0375" +] diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml index 102d82d734..2e27f2247d 100644 --- a/.github/workflows/dependencies.yml +++ b/.github/workflows/dependencies.yml @@ -28,7 +28,21 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - - uses: rustsec/audit-check@v1.4.1 + with: + submodules: true + + - name: Install rust toolchain + id: toolchain + run: | + rustup toolchain install stable --profile minimal + rustup override set stable + + - uses: camshaft/rust-cache@v1 + + - name: Run cargo build + run: cargo build + + - uses: rustsec/audit-check@v2.0.0 with: token: ${{ secrets.GITHUB_TOKEN }}