1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
# cargo-deny configuration
# https://embarkstudios.github.io/cargo-deny/
#
# Run: cargo deny check
# Or: make deny
[]
# Targets to check (default: current platform)
= []
= true
# ============================================================================
# ADVISORIES - Security vulnerability database checks
# ============================================================================
[]
# Ignore specific advisories (with justification)
= [
# paste crate unmaintained - transitive dep from ratatui, parquet, etc.
# No security vulnerability, just maintenance status
"RUSTSEC-2024-0436",
]
# ============================================================================
# LICENSES - Allowed open source licenses
# ============================================================================
[]
= [
"MIT",
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Zlib",
"0BSD",
"Unicode-3.0",
"CC0-1.0",
"MPL-2.0",
"CDLA-Permissive-2.0",
]
= 0.8
# Clarifications for crates with non-standard license expressions
[[]]
= "ring"
= "MIT AND ISC AND OpenSSL"
= [{ = "LICENSE", = 0xbd0eed23 }]
[[]]
= "webpki"
= "ISC"
= [{ = "LICENSE", = 0x001c7e6c }]
# ============================================================================
# BANS - Banned crates and duplicate detection
# ============================================================================
[]
= "warn"
= "allow"
= "all"
# Deny specific crates
= [
# Security concerns
# { name = "openssl", reason = "Use rustls instead" },
]
# Skip duplicate checking for these crates (common transitive deps)
= [
# Multiple versions are common for these
{ = "hashbrown", = "*" },
]
# Allow specific crates to have duplicates
= []
# ============================================================================
# SOURCES - Allowed crate registries
# ============================================================================
[]
= ["https://github.com/rust-lang/crates.io-index"]
= []