Merge pull request #25 from wiktor-k/remove-audit

Use `cargo-deny` instead of `cargo-audit`
wiktor-k · Mar 21, 2024 · af49c56 · af49c56
2 parents 133144d + 73f6a34
commit af49c56
Show file tree

Hide file tree

Showing 2 changed files with 30 additions and 2 deletions.
diff --git a/ci/audit.dockerfile b/ci/audit.dockerfile
@@ -1,8 +1,8 @@
 FROM rust
 
-RUN cargo install cargo-audit
+RUN cargo install --locked cargo-deny
 
 COPY . /build
 WORKDIR /build
 
-RUN cargo audit
+RUN cargo deny check
diff --git a/deny.toml b/deny.toml
@@ -0,0 +1,28 @@
+# SPDX-FileCopyrightText: 2023 David Runge <[email protected]>
+# SPDX-FileCopyrightText: 2023 Wiktor Kwapisiewicz <[email protected]>
+# SPDX-License-Identifier: CC0-1.0
+
+[advisories]
+version = 2
+yanked = "deny"
+ignore = [
+  "RUSTSEC-2023-0071",
+]
+
+[bans]
+deny = [
+]
+
+[licenses]
+version = 2
+allow = [
+  "Apache-2.0",
+  "Apache-2.0 WITH LLVM-exception",
+  "MIT",
+  "Unicode-DFS-2016",
+  "BSL-1.0",
+  "CC0-1.0",
+  "ISC",
+  "BSD-3-Clause",
+  "LGPL-3.0",
+]