radicle/radicle-explorer
1
0
Fork 0
mirror of https://seed.radicle.dev/rad:z4V1sjrXqjvFdnCUbxPFqd5p4DtH5.git synced 2026-11-15 19:30:38 +08:00
Code Issues Packages Projects Releases Wiki Activity

explorer: Ignore crypto-bigint advisory

Browse Source 
- Ignore RUSTSEC-2026-0387 in audit config
- Record that radicle uses Ed25519 only, so p256 is never used
This commit is contained in:
Daniel Norman
2026-11-06 11:41:21 +05:30
parent 7ce7541051
commit f546e10a81
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
explorer/.cargo/audit.toml
+5
View File
@@ -7,4 +7,9 @@ ignore = [
# compiled for any target we build. postcard 1.x pins heapless ^0.7, so this
# can only be resolved upstream.
"RUSTSEC-2023-0089",
# crypto-bigint 0.5 reaches the lockfile through radicle-crypto ->
# ssh-agent-lib -> ssh-key -> p256. Radicle uses Ed25519 only, so the p256
# code path is never entered. The fix is in 0.7, but p256 pins crypto-bigint
# ^0.5, so a lockfile update cannot apply it.
"RUSTSEC-2026-0387",
]