From 8de0caff46501a7f732c239843b8b7c8e3066f46 Mon Sep 17 00:00:00 2001
From: Tony Arcieri <bascule@gmail.com>
Date: Sun, 9 Mar 2025 12:08:24 -0600
Subject: [PATCH] CI: fix security audit (#924)

Ignores RUSTSEC-2024-0436: `paste` is unmaintained
---
 .cargo/audit.toml                    | 4 ++++
 .github/workflows/security-audit.yml | 4 ++--
 2 files changed, 6 insertions(+), 2 deletions(-)
 create mode 100644 .cargo/audit.toml

diff --git a/.cargo/audit.toml b/.cargo/audit.toml
new file mode 100644
index 0000000..aba2a08
--- /dev/null
+++ b/.cargo/audit.toml
@@ -0,0 +1,4 @@
+[advisories]
+ignore = [
+    "RUSTSEC-2024-0436", #paste
+] # advisory IDs to ignore e.g. ["RUSTSEC-2019-0001", ...]
diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml
index a7df2f5..ec56c15 100644
--- a/.github/workflows/security-audit.yml
+++ b/.github/workflows/security-audit.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/cache@v4
         with:
           path: ~/.cargo/bin
-          key: ${{ runner.os }}-cargo-audit-v0.21.1
-      - uses: actions-rs/audit-check@v1
+          key: ${{ runner.os }}-cargo-audit-v0.21.2
+      - uses: rustsec/audit-check@v2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}