[advisories]
ignore = [
  "RUSTSEC-2024-0436", # 'paste' dependency in 'alloy' [unmaintained]
  "RUSTSEC-2024-0388", # 'derivative' in 'alloy' [unmaintained],
  "RUSTSEC-2026-0097", #  needs `alloy` to be updated
  "RUSTSEC-2026-0105", # 'core2' via 'multihash' [unmaintained], waiting on multiaddr update
]
informational_warnings = ["unmaintained"]
severity_threshold = "low"

[database]
path = "~/.cargo/advisory-db"
url = "https://github.com/RustSec/advisory-db.git"
fetch = true
stale = false

[output]
deny = ["warnings"]
format = "terminal" # "terminal" (human readable report) or "json"
quiet = false       # Only print information on error
show_tree = true    # Show inverse dependency trees along with advisories (default: true)

[target]
arch = [
  "x86_64",
  "aarch64",
] # Ignore advisories for CPU architectures other than these
os = [
  "linux",
  "windows",
  "macos",
] # Ignore advisories for operating systems other than these

[yanked]
# Disabled: yanked transitive dependencies (e.g. from alloy) cause CI failures
# that we cannot resolve without upstream releasing a fix. Re-enable once the
# dependency tree no longer pulls yanked crates.
enabled = false
