From b0c445e20cceff65a5348fa598e8eac25354b5c9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Nerijus=20Bend=C5=BEi=C5=ABnas?= Date: Fri, 4 Sep 2026 05:48:52 +0300 Subject: [PATCH] ci(audit): ignore unfixed nltk pathsec advisory until a release lands MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit GHSA-8mgp-746c-j5xp has no fix version, so every nightly run fails and reopens the tracking issue with nothing actionable. commit-guard only pulls fixed resource names from the official NLTK data index, and --ignore-until-fixed drops the exemption on its own once nltk ships a fix. Signed-off-by: Nerijus Bendžiūnas --- .github/workflows/security-audit.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/security-audit.yml b/.github/workflows/security-audit.yml index 5c864f8..87bb237 100644 --- a/.github/workflows/security-audit.yml +++ b/.github/workflows/security-audit.yml @@ -24,7 +24,8 @@ jobs: - name: Audit dependencies run: | set -o pipefail - uv audit --frozen --preview-features audit-command 2>&1 | + uv audit --frozen --preview-features audit-command \ + --ignore-until-fixed GHSA-8mgp-746c-j5xp 2>&1 | tee audit.log - name: Report failure in a tracking issue if: failure() && github.event_name == 'schedule'