Skip to content

Commit 7e4a22e

Browse files
committed
chore(ci): update deny.toml according to cargo-deny breaking changes
See EmbarkStudios/cargo-deny#606.
1 parent 9f99946 commit 7e4a22e

File tree

1 file changed

+8
-45
lines changed

1 file changed

+8
-45
lines changed

deny.toml

+8-45
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
# when any section or field is not specified in your own configuration
1111

1212
# Root options
13-
13+
[graph]
1414
# If 1 or more target triples (and optionally, target_features) are specified,
1515
# only the specified targets will be checked when running `cargo deny check`.
1616
# This means, if a particular package is only ever used as a target specific
@@ -46,6 +46,8 @@ no-default-features = false
4646
# If set, these feature will be enabled when collecting metadata. If `--features`
4747
# is specified on the cmd line they will take precedence over this option.
4848
#features = []
49+
50+
[output]
4951
# When outputting inclusion graphs in diagnostics that include features, this
5052
# option can be used to specify the depth at which feature edges will be added.
5153
# This option is included since the graphs can be quite large and the addition
@@ -61,30 +63,13 @@ feature-depth = 1
6163
db-path = "~/.cargo/advisory-db"
6264
# The url(s) of the advisory databases to use
6365
db-urls = ["https://github.com/rustsec/advisory-db"]
64-
# The lint level for security vulnerabilities
65-
vulnerability = "deny"
66-
# The lint level for unmaintained crates
67-
unmaintained = "warn"
6866
# The lint level for crates that have been yanked from their source registry
6967
yanked = "warn"
70-
# The lint level for crates with security notices. Note that as of
71-
# 2019-12-17 there are no security notice advisories in
72-
# https://github.com/rustsec/advisory-db
73-
notice = "warn"
7468
# A list of advisory IDs to ignore. Note that ignored advisories will still
7569
# output a note when they are encountered.
7670
ignore = [
7771
#"RUSTSEC-0000-0000",
7872
]
79-
# Threshold for security vulnerabilities, any vulnerability with a CVSS score
80-
# lower than the range specified will be ignored. Note that ignored advisories
81-
# will still output a note when they are encountered.
82-
# * None - CVSS Score 0.0
83-
# * Low - CVSS Score 0.1 - 3.9
84-
# * Medium - CVSS Score 4.0 - 6.9
85-
# * High - CVSS Score 7.0 - 8.9
86-
# * Critical - CVSS Score 9.0 - 10.0
87-
severity-threshold = "Medium"
8873

8974
# If this is true, then cargo deny will use the git executable to fetch advisory database.
9075
# If this is false, then it uses a built-in git library.
@@ -96,38 +81,16 @@ severity-threshold = "Medium"
9681
# More documentation for the licenses section can be found here:
9782
# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
9883
[licenses]
99-
# The lint level for crates which do not have a detectable license
100-
unlicensed = "deny"
10184
# List of explicitly allowed licenses
10285
# See https://spdx.org/licenses/ for list of possible licenses
10386
# [possible values: any SPDX 3.11 short identifier (+ optional exception)].
10487
allow = [
105-
#"MIT",
106-
#"Apache-2.0",
107-
#"Apache-2.0 WITH LLVM-exception",
88+
"MIT",
89+
"Apache-2.0",
90+
"Apache-2.0 WITH LLVM-exception",
91+
"Unicode-DFS-2016",
10892
]
109-
# List of explicitly disallowed licenses
110-
# See https://spdx.org/licenses/ for list of possible licenses
111-
# [possible values: any SPDX 3.11 short identifier (+ optional exception)].
112-
deny = [
113-
#"Nokia",
114-
]
115-
# Lint level for licenses considered copyleft
116-
copyleft = "warn"
117-
# Blanket approval or denial for OSI-approved or FSF Free/Libre licenses
118-
# * both - The license will be approved if it is both OSI-approved *AND* FSF
119-
# * either - The license will be approved if it is either OSI-approved *OR* FSF
120-
# * osi - The license will be approved if it is OSI approved
121-
# * fsf - The license will be approved if it is FSF Free
122-
# * osi-only - The license will be approved if it is OSI-approved *AND NOT* FSF
123-
# * fsf-only - The license will be approved if it is FSF *AND NOT* OSI-approved
124-
# * neither - This predicate is ignored and the default lint level is used
125-
allow-osi-fsf-free = "osi"
126-
# Lint level used when no other predicates are matched
127-
# 1. License isn't in the allow or deny lists
128-
# 2. License isn't copyleft
129-
# 3. License isn't OSI/FSF, or allow-osi-fsf-free = "neither"
130-
default = "deny"
93+
13194
# The confidence threshold for detecting a license from license text.
13295
# The higher the value, the more closely the license text must be to the
13396
# canonical license text of a valid SPDX license file.

0 commit comments

Comments
 (0)