chore: ignore RUSTSEC-2023-0071 in cargo audit (no fixed upgrade available)

.gitea/workflows/ci.yml

@@ -71,7 +71,7 @@ jobs:
       - name: Security audit
         run: |
           cargo install cargo-audit --locked
-          cargo audit --manifest-path backend/Cargo.toml
+          cd backend && cargo audit
 
       - name: Build frontend
         run: pnpm --dir frontend build

.gitea/workflows/release.yml

@@ -70,7 +70,7 @@ jobs:
       - name: Security audit
         run: |
           cargo install cargo-audit --locked
-          cargo audit --manifest-path backend/Cargo.toml
+          cd backend && cargo audit
 
       - name: Build frontend
         run: pnpm --dir frontend build

backend/audit.toml

@@ -0,0 +1,2 @@
+[advisories]
+ignore = ["RUSTSEC-2023-0071"] # Marvin Attack: potential key recovery through timing sidechannels in 'rsa' crate. No fixed upgrade available yet.

deploy/values_override.yaml

@@ -3,7 +3,7 @@ httpRoute:
     - tutor.puchstein.dev
 
 image:
-  tag: v0.1.12
+  tag: v0.1.14
 
 env:
   extra: {}