Ignore RUSTSEC-2024-0320 as we don't use the unmaintained crate in production

2024-03-25 10:38:27 +01:00
parent b76f2a5c29
commit b8dfc6d9c7
1 changed files with 4 additions and 1 deletions
--- a/deny.toml
+++ b/deny.toml
@@ -17,7 +17,10 @@ ignore = [

    # RSA key extraction "Marvin Attack". This is only relevant when using
    # PKCS#1 v1.5 encryption, which we don't
-    "RUSTSEC-2023-0071"
+    "RUSTSEC-2023-0071",
+
+    # yaml-rust is unmaintained, and used by insta, which isn't a production dependency
+    "RUSTSEC-2024-0320",
 ]

 [licenses]