the4amfriend commented on issue #3699: URL: https://github.com/apache/iggy/issues/3699#issuecomment-6404335949
@ryerraguntla The issue mentions an audit-remediation sibling issue for seeding the cargo-deny ignore list. I found discussion #3678 and issue #3700, but couldn't locate the remediation issue. Was it created? If so, could you link it? I've been testing the cargo-deny configuration locally, and the advisory check currently reports 24 RustSec advisories (12 vulnerabilities and 12 unmaintained dependencies). I'd like to avoid suppressing security findings without an agreed-upon baseline before submitting a PR. Could you clarify which advisories should be addressed or accepted as known risks? Thanks! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
