gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-28 16:07:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci(audit): wire cargo deny supply-chain gate (#3377)

Browse Source
This commit is contained in:
安正超
2026-06-12 11:11:40 +08:00
committed by GitHub
parent 08c586d843
commit 559bf9d9d7
2 changed files with 27 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deny.toml
+4 -6
View File
@@ -33,6 +33,10 @@ ignore = [
# in-process RSA decryption oracles are removed.
# owner: rustfs-maintainers review: 2026-07
{ id = "RUSTSEC-2023-0071", reason = "rsa Marvin timing sidechannel; no fixed upstream version; tracked separately" },
# `proc-macro-error2 2.0.1` — unmaintained. No direct dependency; pulled
# transitively through `mysql_async` via `mysql-common-derive`.
# owner: rustfs-maintainers review: 2026-07
{ id = "RUSTSEC-2026-0173", reason = "proc-macro-error2 unmaintained; transitive only via mysql_async; tracked for dependency refresh" },
]
[sources]
@@ -43,12 +47,6 @@ allow-git = [
# Custom S3 server library with minio compatibility patches not yet upstreamed.
# Pinned to a specific commit in workspace Cargo.toml.
"https://github.com/rustfs/s3s",
# Temporary git source for russh until required upstream fixes are released.
# owner: rustfs-maintainers review: 2026-05
"https://github.com/Eugeny/russh",
# Temporary git source for mysql_async until required upstream fixes are released.
# owner: rustfs-maintainers review: 2026-05
"https://github.com/blackbeam/mysql_async",
]
[bans]