Pratik Bhadane
65 lines
2.0 KiB
TOML
65 lines
2.0 KiB
TOML
# cargo-deny configuration
|
||
# Run: cargo deny check
|
||
# CI: add `cargo install cargo-deny && cargo deny check` to the audit job
|
||
|
||
[graph]
|
||
# Targets to check — all platforms used in CI
|
||
targets = [
|
||
"x86_64-unknown-linux-gnu",
|
||
"x86_64-apple-darwin",
|
||
"aarch64-apple-darwin",
|
||
"x86_64-pc-windows-msvc",
|
||
"wasm32-unknown-unknown",
|
||
]
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Licenses
|
||
# ---------------------------------------------------------------------------
|
||
[licenses]
|
||
# Confidence threshold for detecting a license (0.0 – 1.0)
|
||
confidence-threshold = 0.8
|
||
|
||
# List of explicitly allowed SPDX license identifiers
|
||
allow = [
|
||
"MIT",
|
||
"Apache-2.0",
|
||
"Apache-2.0 WITH LLVM-exception",
|
||
"BSD-2-Clause",
|
||
"BSD-3-Clause",
|
||
"ISC",
|
||
"Unicode-DFS-2016",
|
||
"Unicode-3.0",
|
||
"Zlib",
|
||
"CC0-1.0",
|
||
]
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Bans — duplicate crates, banned crates
|
||
# ---------------------------------------------------------------------------
|
||
[bans]
|
||
# Deny multiple versions of the same crate (set to "warn" to downgrade)
|
||
multiple-versions = "warn"
|
||
# Deny wildcard dependencies
|
||
wildcards = "deny"
|
||
# Skip certain crates that intentionally have multiple versions
|
||
skip = []
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Advisories — security vulnerability database
|
||
# ---------------------------------------------------------------------------
|
||
[advisories]
|
||
# Path to local advisory database (leave empty to use the bundled one)
|
||
# db-path = "~/.cargo/advisory-db"
|
||
db-urls = ["https://github.com/rustsec/advisory-db"]
|
||
# Deny known security vulnerabilities
|
||
version = 2
|
||
ignore = []
|
||
|
||
# ---------------------------------------------------------------------------
|
||
# Sources — only allow crates from crates.io and our own path deps
|
||
# ---------------------------------------------------------------------------
|
||
[sources]
|
||
unknown-registry = "deny"
|
||
unknown-git = "deny"
|
||
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|