dahjah/vaultwarden
1
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-04-12 12:51:32 -06:00
Code Issues Actions 17 Packages Projects Releases Wiki Activity

chore(audit): format deny.toml license exceptions as [[licenses.exceptions]] (cargo-deny compatible)

Browse Source
This commit is contained in:
kalvinparker 2025-11-09 07:57:46 +00:00
parent f16723c8d8
commit a64bf18935
1 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
deny.toml
View File

@ -9,11 +9,15 @@
allow = ["AGPL-3.0-only", "MIT", "Apache-2.0", "BSD-3-Clause"]
## Temporary exceptions added by remediations/audit-2025-11-09
## These exceptions are timeboxed and tracked in issues/TRACK-2025-11-09-RSA-PASTE.md
exceptions = [
# Allow RUSTSEC-2023-0071 (rsa 0.9.8) transitively required today via openidconnect
# Rationale: no safe published upgrade available at audit date; risk acknowledged and tracked.
{ crate = "rsa", version = "=0.9.8", reason = "RUSTSEC-2023-0071: no safe upgrade available; temporary exception; see issues/TRACK-2025-11-09-RSA-PASTE.md", expires = "2026-02-01" },
# Allow RUSTSEC-2024-0436 (paste 1.0.15) transitively required today via rmp/rmpv
# Rationale: crate marked unmaintained; temporary exception while replacement plan is executed.
{ crate = "paste", version = "=1.0.15", reason = "RUSTSEC-2024-0436: unmaintained; temporary exception; see issues/TRACK-2025-11-09-RSA-PASTE.md", expires = "2026-02-01" }
]
[[licenses.exceptions]]
crate = "rsa"
version = "=0.9.8"
reason = "RUSTSEC-2023-0071: no safe upgrade available; temporary exception; see issues/TRACK-2025-11-09-RSA-PASTE.md"
expires = "2026-02-01"
[[licenses.exceptions]]
crate = "paste"
version = "=1.0.15"
reason = "RUSTSEC-2024-0436: unmaintained; temporary exception; see issues/TRACK-2025-11-09-RSA-PASTE.md"
expires = "2026-02-01"