Ok, just ignore all current cargo audit advisories
We know about them, there's no point failing all CI because of them.
Tracking issue:
@@ -25,6 +25,9 @@ jobs:
crate: cargo-audit
version: latest
- run: cargo audit --version
- # RUSTSEC-2020-0016: net2 is unmaintained - fixed in notify 5.0 prerelease, waiting for release - https://github.com/rg3dengine/rg3d/issues/208
- # RUSTSEC-2020-0056: stdweb is unmaintained - https://github.com/rg3dengine/rg3d/issues/208
- - run: cargo audit --deny warnings --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2020-0056
+ # RUSTSEC-2020-0016: net2 is unmaintained - fixed in notify 5.0 prerelease, waiting for release
+ # RUSTSEC-2020-0056: stdweb is unmaintained - should be safe to ignore until stdweb is removed from instant
+ # RUSTSEC-2021-0019: xcb - Multiple soundness issues
+ # RUSTSEC-2021-0119: nix - Out-of-bounds write in nix::unistd::getgrouplist - waiting for new winit release
+ # For more info: https://github.com/rg3dengine/rg3d/issues/208
+ - run: cargo audit --deny warnings --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2020-0056 --ignore RUSTSEC-2021-0019 --ignore RUSTSEC-2021-0119
