chore: deny vulnerable dependencies, with exceptions

Ignore two chrono and time vulnerabilities. Nothing we can do about
them until a new chrono release is made that fixes this.

Sponsored-by: author

1 files changed, 5 insertions, 1 deletions

diff --git a/deny.toml b/deny.toml
index 3e015f9..d8a8d4b 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,10 +1,14 @@
 [advisories]
-vulnerability = "allow"
+vulnerability = "deny"
 unmaintained = "warn"
 unsound = "warn"
 yanked = "allow"
 notice = "warn"
 severity-threshold = "medium"
+ignore = [
+  "RUSTSEC-2020-0071",
+  "RUSTSEC-2020-0159",
+]
 
 [licenses]
 unlicensed = "deny"