Add cargo-deny

w4 · w4 · commit f7ae0bc3fd2e · 2024-11-12T23:14:31.000Z
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -7,7 +7,7 @@ jobs:
     name: Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions-rs/toolchain@v1
         with:
           profile: minimal
@@ -36,7 +36,7 @@ jobs:
     name: Rustfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions-rs/toolchain@v1
         with:
           profile: minimal
@@ -47,11 +47,17 @@ jobs:
         with:
           command: fmt
 
+  cargo-deny:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: EmbarkStudios/cargo-deny-action@v1
+
   clippy:
     name: Clippy
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - uses: actions-rs/toolchain@v1
         with:
           profile: minimal
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -42,7 +42,7 @@ gix = { version = "0.67", default-features = false, features = [
 ] }
 httparse = "1.9"
 humantime = "2.1"
-itertools = "0.13.0"
+itertools = "0.12.1"
 kanal = "0.1.0-pre8"
 md5 = "0.7"
 moka = { version = "0.12.0", features = ["future"] }
diff --git a/deny.toml b/deny.toml
@@ -0,0 +1,51 @@
+[graph]
+targets = []
+all-features = false
+no-default-features = false
+
+[output]
+feature-depth = 1
+
+[advisories]
+ignore = []
+
+[licenses]
+allow = [
+    "MIT",
+    "Apache-2.0",
+    "Unicode-3.0",
+    "Unicode-DFS-2016",
+    "WTFPL",
+    "BSL-1.0",
+    "CC0-1.0",
+    "BSD-3-Clause",
+    "ISC",
+    "Zlib",
+    "BSD-2-Clause",
+]
+confidence-threshold = 0.8
+exceptions = []
+
+[bans]
+multiple-versions = "warn"
+wildcards = "allow"
+highlight = "all"
+workspace-default-features = "allow"
+external-default-features = "allow"
+allow = []
+deny = []
+skip = [
+    { crate = "sync_wrapper@0.1.2", reason = "tower has not upgraded to 1.0 yet" },
+    { crate = "windows-sys@0.52.0", reason = "gix pulls in two separate versions" },
+    { crate = "hashbrown@0.14.5", reason = "gix has not upgraded their version of dashmap" },
+]
+skip-tree = [
+    { name = "matchers", reason = "tracing-subscriber's env-filter pulls in an ancient regex version" }
+]
+
+[sources]
+unknown-registry = "warn"
+unknown-git = "warn"
+allow-registry = ["https://github.com/rust-lang/crates.io-index"]
+allow-git = []
+
