refactor: Simplify deny.toml configuration
Release / release-build (, arch, default) (push) Has been cancelled
Release / release-build (, debian, default) (push) Has been cancelled
Release / release-build (, fedora, default) (push) Has been cancelled
Release / release-build (, ubuntu, default) (push) Has been cancelled
Release / release-build (--no-default-features, ubuntu, no-networking) (push) Has been cancelled
Release / release (push) Has been cancelled

This commit is contained in:
2026-03-17 22:06:34 +01:00
parent aa59067bb3
commit 55c8fc0a4f
+1 -61
View File
@@ -1,70 +1,10 @@
# Cargo-deny configuration for RustLock
# See: https://embarkstudios.github.io/cargo-deny/
[advisories]
# Check for security vulnerabilities
vulnerability = "deny"
# Check for unmaintained crates
unmaintained = "warn"
# Check for unsound crates
unsound = "deny"
# Check for yanked crates
yanked = "deny"
# Ignore specific advisories
ignore = [
# Add specific advisory IDs to ignore here if needed
]
# Sources for advisory database
[advisories.db]
# Use GitHub advisory database
github-data = "https://github.com/rustsec/advisory-db"
# Update frequency (daily)
update-frequency = "daily"
ignore = []
[bans]
# Multiple versions of the same crate
multiple-versions = "allow"
# Wildcard dependencies (e.g., "1.*")
wildcards = "deny"
# Skip specific crates from checks
skip = [
# Add crate names to skip here if needed
]
[licenses]
# Default license policy
default = "deny"
# Allow these licenses
allow = [
"MIT",
"Apache-2.0",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Zlib",
"Unlicense",
"CC0-1.0",
"MPL-2.0",
"AGPL-3.0-or-later", # Our own license
]
# Copyleft licenses that require special attention
copyleft = "warn"
# Unknown licenses
unlicensed = "deny"
# Skip specific crates from license checks
skip = [
# Add crate names to skip here if needed
]
[sources]
# Allow only these registries
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
# Deny git repositories (except for specific cases)
allow-git = []
[metadata]
# Minimum severity level to display
severity-threshold = "low"