Struct DenyConfig 

pub struct DenyConfig {
    pub categories: Vec<String>,
}

Crate-level deny configuration from [deny] in .capsec.toml.

When categories are specified, any ambient authority matching those categories is promoted to a Critical-risk deny violation — the same behavior as #[capsec::deny(...)] on individual functions, but applied crate-wide.

Valid categories: all, fs, net, env, process, ffi.

Fields

categories: Vec<String>

Implementations

impl DenyConfig

pub fn normalized_categories(&self) -> Vec<String>

Normalizes category names to lowercase and warns about unknown categories.

Trait Implementations

impl Debug for DenyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DenyConfig

fn default() -> DenyConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DenyConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.