diff --git a/.cargo/audit.toml b/.cargo/audit.toml
new file mode 100644
index 00000000..9a25fa63
--- /dev/null
+++ b/.cargo/audit.toml
@@ -0,0 +1,9 @@
+[advisories]
+ignore = [
+    # difference is unmaintained
+    # Only used in test code
+    "RUSTSEC-2020-0095",
+    # Out-of-bounds write in nix::unistd::getgrouplist
+    # Tracked in #3140
+    "RUSTSEC-2021-0119"
+]
\ No newline at end of file