ZacharyZhang-NY/ELY-Browser
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci(security): enforce Rust advisory policy

Browse Source
This commit is contained in:
ZacharyZhang-NY
2026-07-10 01:23:14 -04:00
parent e085174b89
commit 15ae783c05
3 changed files with 124 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
osv-scanner.toml
+67
View File
@@ -0,0 +1,67 @@
[[IgnoredVulns]]
id = "RUSTSEC-2023-0071"
ignoreUntil = 2026-10-15
reason = "Vendored RSA returns before the shared private exponent primitive; unit and WebCrypto tests enforce the gate while RUSTSEC-2023-0071 has no patched release."
[[PackageOverrides]]
name = "quick-xml"
version = "0.30.0"
ecosystem = "crates.io"
vulnerability.ignore = true
effectiveUntil = 2026-10-15
reason = "Workspace and release feature graphs omit GPUI screen-capture; this optional zed-scap/xcb parser remains lock-only."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0052"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory in GPUI's zed-async-tar transport dependency; migrate with the next GPUI transport refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0141"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory in Servo's WebRender serialization dependency; migrate with the next Servo/WebRender refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0384"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory inherited from the pinned UI and engine stack; migrate with the next upstream stack refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2024-0436"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory inherited from the pinned UI and engine stack; migrate with the next upstream stack refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0134"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory in Servo's TLS parsing dependency; migrate with the next Servo networking refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2026-0192"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory across pinned GPUI and Servo font stacks; migrate with their coordinated font dependency refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0081"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0075"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0080"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0100"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."
[[IgnoredVulns]]
id = "RUSTSEC-2025-0098"
ignoreUntil = 2026-10-15
reason = "Maintenance-status advisory in Servo's pinned Unicode stack; migrate with the next Servo Unicode refresh."