/
.deny.toml
75 lines (72 loc) · 2.71 KB
/
.deny.toml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
[advisories]
vulnerability = "deny"
unmaintained = "deny"
unsound = "deny"
yanked = "deny"
notice = "deny"
git-fetch-with-cli = true
ignore = [
]
# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
[bans]
multiple-versions = "warn"
wildcards = "deny"
allow-wildcard-paths = true
build.executables = "deny"
build.interpreted = "deny"
build.include-dependencies = true
build.include-workspace = false # covered by tools/tidy.sh
build.include-archives = true
build.allow-build-scripts = [
{ name = "anyhow" },
{ name = "camino" },
{ name = "fs-err" },
{ name = "libc" },
{ name = "proc-macro2" },
{ name = "rustix" }, # via tar
{ name = "serde_json" },
{ name = "serde" },
{ name = "syn" }, # 1.0, via ruzstd
{ name = "winapi-i686-pc-windows-gnu" }, # via shared_child via duct & via is_executable
{ name = "winapi-x86_64-pc-windows-gnu" }, # via shared_child via duct & via is_executable
{ name = "winapi" }, # via shared_child via duct & via is_executable
{ name = "windows_aarch64_gnullvm" },
{ name = "windows_aarch64_msvc" },
{ name = "windows_i686_gnu" },
{ name = "windows_i686_gnullvm" },
{ name = "windows_i686_msvc" },
{ name = "windows_x86_64_gnu" },
{ name = "windows_x86_64_gnullvm" },
{ name = "windows_x86_64_msvc" },
]
build.bypass = [
{ name = "autocfg", allow-globs = ["tests/wrap_ignored"] }, # via fs-err
# Import libraries are necessary because raw-dylib (requires 1.71+ for x86, 1.65+ for others) is not available on MSRV of them.
{ name = "winapi-i686-pc-windows-gnu", allow-globs = ["lib/*.a"] }, # via shared_child via duct & via is_executable
{ name = "winapi-x86_64-pc-windows-gnu", allow-globs = ["lib/*.a"] }, # via shared_child via duct & via is_executable
{ name = "windows_aarch64_gnullvm", allow-globs = ["lib/*.a"] },
{ name = "windows_aarch64_msvc", allow-globs = ["lib/*.lib"] },
{ name = "windows_i686_gnu", allow-globs = ["lib/*.a"] },
{ name = "windows_i686_gnullvm", allow-globs = ["lib/*.a"] },
{ name = "windows_i686_msvc", allow-globs = ["lib/*.lib"] },
{ name = "windows_x86_64_gnu", allow-globs = ["lib/*.a"] },
{ name = "windows_x86_64_gnullvm", allow-globs = ["lib/*.a"] },
{ name = "windows_x86_64_msvc", allow-globs = ["lib/*.lib"] },
]
# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
[licenses]
version = 2
unused-allowed-license = "deny"
private.ignore = true
allow = [
"Apache-2.0",
"MIT",
"Unicode-DFS-2016", # unicode-ident
]
# https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = [
]