chore: move cargo audit ignore to explicit command-line flag

.gitea/workflows/ci.yml

@@ -71,7 +71,7 @@ jobs:
       - name: Security audit
         run: |
           cargo install cargo-audit --locked
-          cd backend && cargo audit
+          cd backend && cargo audit --ignore RUSTSEC-2023-0071
 
       - name: Build frontend
         run: pnpm --dir frontend build

.gitea/workflows/release.yml

@@ -70,7 +70,7 @@ jobs:
       - name: Security audit
         run: |
           cargo install cargo-audit --locked
-          cd backend && cargo audit
+          cd backend && cargo audit --ignore RUSTSEC-2023-0071
 
       - name: Build frontend
         run: pnpm --dir frontend build

backend/audit.toml

@@ -1,2 +0,0 @@
-[advisories]
-ignore = ["RUSTSEC-2023-0071"] # Marvin Attack: potential key recovery through timing sidechannels in 'rsa' crate. No fixed upgrade available yet.

deploy/values_override.yaml

@@ -3,7 +3,7 @@ httpRoute:
     - tutor.puchstein.dev
 
 image:
-  tag: v0.1.14
+  tag: v0.1.15
 
 env:
   extra: {}