Commit Graph

8 Commits (3fcca070f01652f2e8ebca7f02c05f5fbe29d862)

Author SHA1 Message Date
Raphael Taylor-Davies 711ba77341
chore: update object_store to test IMDSv1 fallback (#5509)
* chore: update object_store to test IMDSv1 fallback

* chore: Run cargo hakari tasks

Co-authored-by: CircleCI[bot] <circleci@influxdata.com>
Co-authored-by: kodiakhq[bot] <49736102+kodiakhq[bot]@users.noreply.github.com>
2022-08-30 12:31:49 +00:00
Dom Dwyer e752a707f8 revert: remove audit ignore for RUSTSEC-2022-0048
This reverts commit 227149e5b6.
2022-08-30 10:39:55 +02:00
Dom Dwyer 227149e5b6 ci: remove audit ignore for RUSTSEC-2022-0048
Now the Azure SDK is no longer a transitive dependency, we can remove
this audit override for xml-rs.
2022-08-29 14:06:51 +02:00
Dom Dwyer 130785977f ci: ignore RUSTSEC-2022-0048
XML parsing lib for the Azure SDK is unmaintained and reportedly
contains integer overflow / panic issues in the parsing functionality.

Low risk ignore as it is used when talking to Azure only. The Azure SDK
is in the progress of being removed as a dependency.
2022-08-29 13:47:04 +02:00
Jacob Marble bacd2ea470
chore: unsuppress a few security notifications (#4967)
Helps #2884

- RUSTSEC-2020-0159 (withdrawn)
- RUSTSEC-2021-0127 (cargo deny says this isn't needed)
- "query" (cargo deny says this isn't needed)

Co-authored-by: kodiakhq[bot] <49736102+kodiakhq[bot]@users.noreply.github.com>
2022-06-29 19:49:50 +00:00
Marco Neumann 7d16f57c85
ci: simplify cargo deny (#4640)
Taken from https://github.com/influxdata/object_store_rs/pull/5

Co-authored-by: kodiakhq[bot] <49736102+kodiakhq[bot]@users.noreply.github.com>
2022-05-19 09:51:15 +00:00
Marco Neumann 52346642a0
ci: fix cargo deny (#4629)
* ci: fix cargo deny

* chore: downgrade `socket2`, version 0.4.5 was yanked

* chore: rename `query` to `iox_query`

`query` is already taken on crates.io and yanked and I am getting tired
of working around that.
2022-05-18 09:38:35 +00:00
Dom Dwyer 16941d0900 ci: cargo-deny config
Adds a config file for cargo-deny[1] that runs the following checks:

    * advisory-db[2] RUSTSEC checks for deps (like cargo-audit)
    * errors if a dependency has been "yanked" from crates.io
    * errors if attempting to use OpenSSL as a dependency.

The RUSTSEC checks copy over the whitelist from the current cargo-audit
config.

[1]: https://github.com/EmbarkStudios/cargo-deny
[2]: https://github.com/rustsec/advisory-db
2022-03-07 15:32:16 +00:00