solana/ci/do-audit.sh

23 lines
517 B
Bash
Executable File

#!/usr/bin/env bash
set -e
here="$(dirname "$0")"
src_root="$(readlink -f "${here}/..")"
cd "${src_root}"
cargo_audit_ignores=(
# Potential segfault in the time crate
#
# Blocked on chrono updating `time` to >= 0.2.23
--ignore RUSTSEC-2020-0071
# tokio: vulnerability affecting named pipes on Windows
#
# Exception is a stopgap to unblock CI
# https://github.com/solana-labs/solana/issues/29586
--ignore RUSTSEC-2023-0001
)
scripts/cargo-for-all-lock-files.sh audit "${cargo_audit_ignores[@]}"