aboutsummaryrefslogtreecommitdiff
path: root/maint/cargo_audit
Commit message (Collapse)AuthorAgeFilesLines
* Add a cargo-audit exception for RUSTSEC-2023-0052Nick Mathewson2023-08-221-0/+13
| | | | | We've solved this for rustls-webpki, but tls-api (which arti-hyper uses) still requires the unmaintained webpki crate. See #1016.
* cargo_audit: Add an exception for RUSTSEC-2022-0093.Nick Mathewson2023-08-141-0/+8
| | | | | | | This is the API deficiency in ed25519-dalek v1 that allows you to mismatch public and private keys, leading to a (fatal) double-signing attack. We have worked around this in our current design, so it's appropriate to suppress this warning for now.
* cargo audit: un-ignore RUSTSEC-2023-0040 ("`users` is unmaintained"Ian Jackson2023-07-141-3/+0
|
* maint/cargo-audit: Ignore RUSTSEC-2023-0040 (the users crate is unmaintained)Gabriela Moldovan2023-06-051-0/+3
| | | | Signed-off-by: Gabriela Moldovan <[email protected]>
* shell: use /usr/bin/env instead of absolute pathsEmil Engler2023-01-251-1/+1
| | | | | | | | | | This commit changes the shebang in all shell scripts from absolute paths (such as `/bin/bash` or `/usr/bin/python3`) to the `/usr/bin/env` binary with the accompanying interpreter as it's argument. The reason for this are as follows: - NixOS cannot work with absolute paths - BSD systems install their packages in /usr/local/bin
* Ignore atty theoretical unaligned read for nowIan Jackson2022-11-221-0/+7
|
* Upgrade to clap 3 with minimal changesGabriel de Perthuis2022-11-041-5/+5
| | | | | | | | This removes the last cargo audit override (for the unmaintained ansi_term). Don't mark options as required when they have default values: see <https://github.com/clap-rs/clap/pull/3793>.
* update to v5.0.0trinity-1686a2022-08-311-5/+4
|
* maint/cargo_audit: Tolerate RUSTSEC-2021-0139 (ansi_term unmaintained)Ian Jackson2022-08-221-0/+5
|
* maint/cargo_audit: Honour $CARGOIan Jackson2022-08-221-1/+1
| | | | | This makes it easier to for me to test this script. (I would like to do this to all of them but it's easier on a case-by-case basis.)
* update tls-api to 0.8.0trinity-1686a2022-04-281-4/+4
| | | | and remove corresponding RUSTSEC from ignored list
* Fix typosDimitris Apostolou2022-04-111-3/+3
|
* fix maint/cargo_audit not propagating error and add temporary exceptionstrinity-1686a2022-04-081-0/+11
|
* rename *.sh scripts to bare nameIan Jackson2022-02-181-0/+77
As per #309 Update all references. There is one remaining hit for git-grep '\.sh\b' namely "build.sh" in maint/reproducible_build, which I think is the build script for osxcross - ie, an external project.