# cargo-audit configuration for aperion-shield
#
# Run with:
#   cargo install cargo-audit
#   cargo audit
#
# As of v0.6.0 (2026-05-18) the three RUSTSEC-2026-0098/-0099/-0104
# advisories against `rustls-webpki 0.101.7` have been closed by the
# dep upgrade to `rustls 0.23` / `rustls-webpki >= 0.103.13` (which
# came in transitively with `reqwest 0.12` and `hyper 1.x`). The
# ignore list is intentionally empty -- the build must stay
# advisory-clean. If a new advisory shows up here, document the
# analysis in SECURITY.md and either fix it (preferred) or add a
# justified ignore entry (with a public link back to SECURITY.md).

[advisories]
ignore               = []
informational_warnings = ["unmaintained", "unsound", "notice"]
severity_threshold   = "low"
