Skip to content

build(deps): bump serde_qs from 0.12.0 to 0.13.0 #133

build(deps): bump serde_qs from 0.12.0 to 0.13.0

build(deps): bump serde_qs from 0.12.0 to 0.13.0 #133

Workflow file for this run

name: Security audit
on:
push:
paths:
- '**/Cargo.toml'
- '**/Cargo.lock'
jobs:
security_audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: rustsec/audit-check@v1
with:
token: ${{ secrets.GITHUB_TOKEN }}
# RUSTSEC-2023-0071 - Marvin Attack: potential key recovery through timing sidechannels (rsa crate)
# Reason for ignore: Vulnerable code is not actually used
# Explanation:
# The 'rsa' crate is pulled in by the 'sqlx-mysql' crate. The 'sqlx-mysql' crate
# is only pulled in because we use the `migrate` feature of `sqlx`. However, we
# only use the postgres and sqlite DB drivers.
ignore: RUSTSEC-2023-0071