chore: move specific CI audit rules into global .cargo/audit.toml

2026-05-04 14:22:26 +02:00
parent b6eec61677
commit 46e823ffda
4 changed files with 18 additions and 6 deletions
@@ -136,13 +136,9 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
-      # RUSTSEC-2023-0071 (Marvin Attack): rsa crate is a transitive dependency from jsonwebtoken.
-      # Not affected: This application uses HS256 for internal JWT signing and only performs
-      # RSA public key verification (not private key operations) for OIDC/OAuth2 tokens.
      - uses: rustsec/audit-check@v2.0.0
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
-          ignore: RUSTSEC-2023-0071

  build:
    name: Build Check