From 5ffa8ef209c9e4abcfa265116a40f4179fbd8b74 Mon Sep 17 00:00:00 2001 From: Stacky McStackface <95074132+stackable-bot@users.noreply.github.com> Date: Tue, 3 Dec 2024 13:01:41 +0100 Subject: [PATCH] chore: Generated commit to update templated files since the last template run up to stackabletech/operator-templating@35074dc5e490849c03bdf9999716cdd196d6c791 (#530) Reference-to: stackabletech/operator-templating@35074dc (Allow OpenSSL license and silence two Rust advisories) --- deny.toml | 22 ++++++++++++++++++++++ scripts/docs_templating.sh | 2 +- 2 files changed, 23 insertions(+), 1 deletion(-) diff --git a/deny.toml b/deny.toml index ba73fa96..2c0138d0 100644 --- a/deny.toml +++ b/deny.toml @@ -9,6 +9,27 @@ targets = [ [advisories] yanked = "deny" +ignore = [ + # https://rustsec.org/advisories/RUSTSEC-2023-0071 + # "rsa" crate: Marvin Attack: potential key recovery through timing sidechannel + # + # No patch is yet available, however work is underway to migrate to a fully constant-time implementation + # So we need to accept this, as of SDP 24.11 we are not using the rsa crate to create certificates used in production + # setups. + # + # TODO: Remove after https://github.com/RustCrypto/RSA/pull/394 is merged + "RUSTSEC-2023-0071", + + # https://rustsec.org/advisories/RUSTSEC-2024-0384 + # "instant" is unmaintained + # + # The upstream "kube" crate also silenced this in https://github.com/kube-rs/kube/commit/4f1e889f265da8f19f03f60683569cae1a154fda + # They/we are actively working on migrating kube from backoff to backon, which removes the transitive dependency on + # instant, in https://github.com/kube-rs/kube/pull/1652. + # + # TODO: Remove after https://github.com/kube-rs/kube/pull/1652 is merged + "RUSTSEC-2024-0384", +] [bans] multiple-versions = "allow" @@ -26,6 +47,7 @@ allow = [ "LicenseRef-webpki", "MIT", "MPL-2.0", + "OpenSSL", # Needed for the ring and/or aws-lc-sys crate. See https://github.com/stackabletech/operator-templating/pull/464 for details "Unicode-3.0", "Unicode-DFS-2016", "Zlib", diff --git a/scripts/docs_templating.sh b/scripts/docs_templating.sh index ed5b9b01..e4b945da 100755 --- a/scripts/docs_templating.sh +++ b/scripts/docs_templating.sh @@ -21,7 +21,7 @@ fi if ! command -v jinja2 &> /dev/null then echo "jinja2 could not be found. Use 'pip install jinja2-cli' to install it." - exit + exit 1 fi # Check if templating vars file exists