4 Commits

Author	SHA1	Message	Date
Neal H. Walfield	a57c8ad8c7	Update deny.toml. ... - Sync `deny.toml` with the version in `common-ci`.	2024-06-14 20:52:17 +02:00
Justus Winter	2143899236	deny: Remove old goodlist and license entry, goodlist yaml-rust. ... - yaml-rust is unmaintained. - yaml-rust is used by subplot/roadmap/serde_yaml thus an indirect dependency. Remove when a new version of roadmap is released that uses a newer version of serde_yaml. See https://gitlab.com/larswirzenius/roadmap/-/issues/13	2024-03-26 18:22:11 +01:00
Neal H. Walfield	33e900e1f7	ci: Allow fehler ... - RUSTSEC-2023-0067 was published to encourage projects to move from `fehler` to culpa. `fehler` is an indirect dependency. Allow it for now.	2023-10-17 14:52:16 +02:00
David Runge	0682d6dcea	Add cargo-deny integration ... - Add `deny.toml` for `cargo deny` with advisory error for `RUSTSEC- 2020-0071` disabled as it does not affect chrono (or us for that matter). Allow multiple versions as there is not much we can do about those anyways and it clutters the output immensely. Add all currently used licenses to allow list. Deny the use of `ring` as it does not have a responsible disclosure policy: https://github.com/briansmith/ring#bug-reporting - Run `cargo deny` as further `test` step in GitLab CI, so that it is among the last things that may fail in a merge request.	2023-05-30 13:19:24 +02:00