aboutsummaryrefslogtreecommitdiffstats
path: root/packaging/pip-audit-ignore.txt
diff options
context:
space:
mode:
Diffstat (limited to 'packaging/pip-audit-ignore.txt')
-rw-r--r--packaging/pip-audit-ignore.txt6
1 files changed, 6 insertions, 0 deletions
diff --git a/packaging/pip-audit-ignore.txt b/packaging/pip-audit-ignore.txt
new file mode 100644
index 0000000..8aec984
--- /dev/null
+++ b/packaging/pip-audit-ignore.txt
@@ -0,0 +1,6 @@
+# Vulnerabilities packaging/audit_deps.py lets through, one per line:
+#
+# <id> # why it does not apply to MeshBay, and when to look again
+#
+# An id is what pip-audit prints (PYSEC-…, GHSA-…, CVE-…). Remove a line once
+# the fixed version ships.