refactor: Simplify deny.toml configuration
Release / release-build (, arch, default) (push) Has been cancelled
Release / release-build (, debian, default) (push) Has been cancelled
Release / release-build (, fedora, default) (push) Has been cancelled
Release / release-build (, ubuntu, default) (push) Has been cancelled
Release / release-build (--no-default-features, ubuntu, no-networking) (push) Has been cancelled
Release / release (push) Has been cancelled
Release / release-build (, arch, default) (push) Has been cancelled
Release / release-build (, debian, default) (push) Has been cancelled
Release / release-build (, fedora, default) (push) Has been cancelled
Release / release-build (, ubuntu, default) (push) Has been cancelled
Release / release-build (--no-default-features, ubuntu, no-networking) (push) Has been cancelled
Release / release (push) Has been cancelled
This commit is contained in:
@@ -1,70 +1,10 @@
|
|||||||
# Cargo-deny configuration for RustLock
|
|
||||||
# See: https://embarkstudios.github.io/cargo-deny/
|
|
||||||
|
|
||||||
[advisories]
|
[advisories]
|
||||||
# Check for security vulnerabilities
|
|
||||||
vulnerability = "deny"
|
vulnerability = "deny"
|
||||||
# Check for unmaintained crates
|
ignore = []
|
||||||
unmaintained = "warn"
|
|
||||||
# Check for unsound crates
|
|
||||||
unsound = "deny"
|
|
||||||
# Check for yanked crates
|
|
||||||
yanked = "deny"
|
|
||||||
# Ignore specific advisories
|
|
||||||
ignore = [
|
|
||||||
# Add specific advisory IDs to ignore here if needed
|
|
||||||
]
|
|
||||||
|
|
||||||
# Sources for advisory database
|
|
||||||
[advisories.db]
|
|
||||||
# Use GitHub advisory database
|
|
||||||
github-data = "https://github.com/rustsec/advisory-db"
|
|
||||||
# Update frequency (daily)
|
|
||||||
update-frequency = "daily"
|
|
||||||
|
|
||||||
[bans]
|
[bans]
|
||||||
# Multiple versions of the same crate
|
|
||||||
multiple-versions = "allow"
|
multiple-versions = "allow"
|
||||||
# Wildcard dependencies (e.g., "1.*")
|
|
||||||
wildcards = "deny"
|
|
||||||
|
|
||||||
# Skip specific crates from checks
|
|
||||||
skip = [
|
|
||||||
# Add crate names to skip here if needed
|
|
||||||
]
|
|
||||||
|
|
||||||
[licenses]
|
|
||||||
# Default license policy
|
|
||||||
default = "deny"
|
|
||||||
# Allow these licenses
|
|
||||||
allow = [
|
|
||||||
"MIT",
|
|
||||||
"Apache-2.0",
|
|
||||||
"BSD-2-Clause",
|
|
||||||
"BSD-3-Clause",
|
|
||||||
"ISC",
|
|
||||||
"Zlib",
|
|
||||||
"Unlicense",
|
|
||||||
"CC0-1.0",
|
|
||||||
"MPL-2.0",
|
|
||||||
"AGPL-3.0-or-later", # Our own license
|
|
||||||
]
|
|
||||||
# Copyleft licenses that require special attention
|
|
||||||
copyleft = "warn"
|
|
||||||
# Unknown licenses
|
|
||||||
unlicensed = "deny"
|
|
||||||
|
|
||||||
# Skip specific crates from license checks
|
|
||||||
skip = [
|
|
||||||
# Add crate names to skip here if needed
|
|
||||||
]
|
|
||||||
|
|
||||||
[sources]
|
[sources]
|
||||||
# Allow only these registries
|
|
||||||
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|
||||||
# Deny git repositories (except for specific cases)
|
|
||||||
allow-git = []
|
allow-git = []
|
||||||
|
|
||||||
[metadata]
|
|
||||||
# Minimum severity level to display
|
|
||||||
severity-threshold = "low"
|
|
||||||
Reference in New Issue
Block a user