Temporarily ignore RUSTSEC-2023-0071 until fix is available (#140)

ramosbugs · Nov 28, 2023 · d796cca · d796cca
1 parent 6735ecb
commit d796cca
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -82,7 +82,11 @@ jobs:
           # The chrono thread safety issue doesn't affect this crate since the crate does not rely
           # on the system's local time zone, only UTC. See:
           # https://github.com/chronotope/chrono/issues/499#issuecomment-946388161
-          cargo ${CARGO_LOCKED} audit --ignore RUSTSEC-2020-0159
+          # FIXME(ramosbugs/openidconnect-rs#140): upgrade `rsa` once fix for RUSTSEC-2023-0071 is
+          # available.
+          cargo ${CARGO_LOCKED} audit \
+            --ignore RUSTSEC-2020-0159 \
+            --ignore RUSTSEC-2023-0071
 
       - name: Check WASM build
         run: cargo ${CARGO_LOCKED} check --target wasm32-unknown-unknown