ExternalVendorCode/onefuzz
1
0
Fork 0
mirror of https://github.com/microsoft/onefuzz.git synced 2025-06-14 11:08:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Temporarily ignore non-actionable cargo audit errors (#1365)

Browse Source
This commit is contained in:
Joe Ranweiler
2021-10-18 15:46:07 -07:00
committed by GitHub
parent a633b7c8a5
commit bb40c66eb0
2 changed files with 12 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/ci/agent.sh
View File

@ -35,11 +35,13 @@ if [ X${CARGO_INCREMENTAL} == X ]; then
fi
cargo fmt -- --check
# RUSTSEC-2020-0016: a dependency net2 (pulled in from tokio) is deprecated
# RUSTSEC-2020-0036: a dependency failure (pulled from proc-maps) is deprecated
# RUSTSEC-2019-0036: a dependency failure (pulled from proc-maps) has type confusion vulnerability
# RUSTSEC-2021-0065: a dependency anymap is no longer maintained
cargo audit --deny warnings --deny unmaintained --deny unsound --deny yanked --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2020-0036 --ignore RUSTSEC-2019-0036 --ignore RUSTSEC-2021-0065
# RUSTSEC-2020-0016: a dependency `net2` (pulled in from tokio) is deprecated
# RUSTSEC-2020-0036: a dependency `failure` (pulled from proc-maps) is deprecated
# RUSTSEC-2019-0036: a dependency `failure` (pulled from proc-maps) has type confusion vulnerability
# RUSTSEC-2021-0065: a dependency `anymap` is no longer maintained
# RUSTSEC-2020-0159: potential segfault in `time`, not yet patched (#1366)
# RUSTSEC-2020-0071: potential segfault in `chrono`, not yet patched (#1366)
cargo audit --deny warnings --deny unmaintained --deny unsound --deny yanked --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2020-0036 --ignore RUSTSEC-2019-0036 --ignore RUSTSEC-2021-0065 --ignore RUSTSEC-2020-0159 --ignore RUSTSEC-2020-0071
cargo-license -j > data/licenses.json
cargo build --release --locked
cargo clippy --release -- -D warnings

8
src/ci/proxy.sh
View File

@ -12,9 +12,11 @@ mkdir -p artifacts/proxy
cd src/proxy-manager
cargo fmt -- --check
cargo clippy --release -- -D warnings
# RUSTSEC-2020-0016: a dependency net2 (pulled in from tokio) is deprecated
# RUSTSEC-2021-0065: a dependency anymap is no longer supported
cargo audit --deny warnings --deny unmaintained --deny unsound --deny yanked --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2021-0065
# RUSTSEC-2020-0016: a dependency `net2` (pulled in from `tokio`) is deprecated
# RUSTSEC-2021-0065: a dependency `anymap` is no longer supported
# RUSTSEC-2020-0159: potential segfault in `time`, not yet patched (#1366)
# RUSTSEC-2020-0071: potential segfault in `chrono`, not yet patched (#1366)
cargo audit --deny warnings --deny unmaintained --deny unsound --deny yanked --ignore RUSTSEC-2020-0016 --ignore RUSTSEC-2021-0065 --ignore RUSTSEC-2020-0159 --ignore RUSTSEC-2020-0071
cargo-license -j > data/licenses.json
cargo build --release --locked
# export RUST_LOG=trace