Ignore RUSTSEC-2024-0398

Related to #8990
Scille · Dec 19, 2024 · 50dcc3f · 50dcc3f
1 parent bc3b9cb
commit 50dcc3f
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 13 deletions.
diff --git a/.github/workflows/package-client.yml b/.github/workflows/package-client.yml
@@ -233,30 +233,31 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        cache-rust: [false]
         include:
           - name: 🏁 Windows
-            platform: windows
-            os: windows-2022
-            raw_latest_file: latest.yml
+            artifact_tag: windows-exe
+            cache-rust: false
             extension: exe
             os_alias: win
-            artifact_tag: windows-exe
+            os: windows-2022
+            platform: windows
+            raw_latest_file: latest.yml
           - name: 🍎 macOS
-            platform: macos
-            os: macos-13
-            raw_latest_file: latest-mac.yml
+            artifact_tag: macos-dmg
             cache-rust: true
             extension: "*" # Use wildcard to match dmg and zip extension
             os_alias: mac
-            artifact_tag: macos-dmg
+            os: macos-13
+            platform: macos
+            raw_latest_file: latest-mac.yml
           - name: 🐧 AppImage 4 Linux
-            platform: linux
+            artifact_tag: linux-appimage
+            cache-rust: false
+            extension: AppImage
+            os_alias: linux
             os: ubuntu-22.04
+            platform: linux
             raw_latest_file: latest-linux.yml
-            os_alias: linux
-            extension: AppImage
-            artifact_tag: linux-appimage
     name: "${{matrix.name }}: ⚡ Package electron"
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60

diff --git a/deny.toml b/deny.toml
@@ -93,6 +93,14 @@ We are not affected since sqlx is used on the client side to store the files' da
 Before being stored in SQLite, that data is splitted into chunk and encoded, so we are below the overflow limit of 4GB.
 """
 
+[[advisories.ignore]]
+id = "RUSTSEC-2024-0398"
+reason = """
+We do not distribute the same secret 500-1500 times.
+
+https://github.com/Scille/parsec-cloud/issues/8990
+"""
+
 # If this is true, then cargo deny will use the git executable to fetch advisory database.
 # If this is false, then it uses a built-in git library.
 # Setting this to true can be helpful if you have special authentication requirements that cargo-deny does not support.