|
22 | 22 | toolchain: stable |
23 | 23 | - name: Install cargo audit |
24 | 24 | run: cargo install cargo-audit |
25 | | - # Crate: sqlx |
26 | | - # Version: 0.8.0 |
27 | | - # Title: Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts |
28 | | - # error: 1 vulnerability found! |
29 | | - # Date: 2024-08-15 |
30 | | - # ID: RUSTSEC-2024-0363 |
31 | | - # URL: https://rustsec.org/advisories/RUSTSEC-2024-0363 |
32 | | - # Solution: Upgrade to >=0.8.1 |
33 | | - # Dependency tree: |
34 | | - # sqlx 0.8.0 |
35 | | - # ├── tensor_chord_extension 0.16.1 |
36 | | - # ├── sqlx_embedded 0.16.1 |
37 | | - # ├── postgresql_embedded 0.16.1 |
38 | | - # │ ├── zonky 0.16.1 |
39 | | - # │ ├── tensor_chord_extension 0.16.1 |
40 | | - # │ ├── sqlx_embedded 0.16.1 |
41 | | - # │ ├── postgresql_extensions 0.16.1 |
42 | | - # │ │ ├── tensor_chord_extension 0.16.1 |
43 | | - # │ │ ├── portal_corp_extension 0.16.1 |
44 | | - # │ │ ├── download_progress_bar 0.16.1 |
45 | | - # │ │ └── axum_embedded 0.16.1 |
46 | | - # │ ├── postgres_embedded 0.16.1 |
47 | | - # │ ├── portal_corp_extension 0.16.1 |
48 | | - # │ ├── embedded_sync 0.16.1 |
49 | | - # │ ├── embedded_async 0.16.1 |
50 | | - # │ ├── download_progress_bar 0.16.1 |
51 | | - # │ └── axum_embedded 0.16.1 |
52 | | - # ├── portal_corp_extension 0.16.1 |
53 | | - # ├── pgvector 0.4.0 |
54 | | - # │ └── portal_corp_extension 0.16.1 |
55 | | - # └── axum_embedded 0.16.1 |
56 | 25 | - name: Audit dependencies |
57 | | - run: cargo audit --ignore RUSTSEC-2024-0363 |
| 26 | + run: cargo audit |
58 | 27 |
|
59 | 28 | check: |
60 | 29 | runs-on: ubuntu-22.04 |
|
0 commit comments