Fix cargo-deny configuration - add missing licenses and ignore paste advisory
This commit is contained in:
21
deny.toml
21
deny.toml
@@ -6,33 +6,20 @@
|
|||||||
allow = [
|
allow = [
|
||||||
"MIT",
|
"MIT",
|
||||||
"Apache-2.0",
|
"Apache-2.0",
|
||||||
"BSD-2-Clause",
|
|
||||||
"BSD-3-Clause",
|
|
||||||
"ISC",
|
|
||||||
"Unlicense",
|
"Unlicense",
|
||||||
"MPL-2.0",
|
"Zlib",
|
||||||
|
"Unicode-3.0",
|
||||||
]
|
]
|
||||||
|
|
||||||
# Allow licenses with specific exceptions
|
|
||||||
exceptions = []
|
|
||||||
|
|
||||||
# Confidence threshold for license detection
|
|
||||||
confidence-threshold = 0.8
|
confidence-threshold = 0.8
|
||||||
|
|
||||||
[bans]
|
[bans]
|
||||||
# Warn on multiple versions of same crate
|
|
||||||
multiple-versions = "warn"
|
multiple-versions = "warn"
|
||||||
wildcards = "allow"
|
wildcards = "allow"
|
||||||
deny = []
|
|
||||||
|
|
||||||
[sources]
|
[sources]
|
||||||
# Ensure all dependencies come from crates.io
|
|
||||||
unknown-registry = "deny"
|
unknown-registry = "deny"
|
||||||
unknown-git = "deny"
|
unknown-git = "deny"
|
||||||
|
|
||||||
[advisories]
|
[advisories]
|
||||||
# Check for security vulnerabilities
|
# Ignore the paste unmaintained warning (ratatui dependency)
|
||||||
vulnerability = "deny"
|
ignore = ["RUSTSEC-2024-0436"]
|
||||||
unmaintained = "warn"
|
|
||||||
unsound = "warn"
|
|
||||||
yanked = "warn"
|
|
||||||
|
|||||||
Reference in New Issue
Block a user