ci: add cargo deny check

dignifiedquire · web-flow · commit d4a7905e27cd · 2024-09-02T19:44:58.000+02:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -304,3 +304,15 @@ jobs:
     steps:
       - uses: actions/checkout@v2
       - uses: codespell-project/actions-codespell@master
+
+  cargo_deny:
+    timeout-minutes: 30
+    name: cargo deny
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: EmbarkStudios/cargo-deny-action@v2
+        with:
+          arguments: --workspace --all-features
+          command: check
+          command-arguments: "-Dwarnings"
diff --git a/deny.toml b/deny.toml
@@ -0,0 +1,26 @@
+[bans]
+multiple-versions = "allow"
+deny = []
+
+[licenses]
+allow = [
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "MIT",
+    "Unicode-DFS-2016",
+    "Zlib"
+]
+
+[[licenses.clarify]]
+name = "ring"
+expression = "MIT AND ISC AND OpenSSL"
+license-files = [
+    { path = "LICENSE", hash = 0xbd0eed23 },
+]
+
+[advisories]
+ignore = [
+  "RUSTSEC-2023-0071" # Waiting for upstream fix
+]
