cargo-allow 0.1.11

Source-tree exception ledger and policy scanner for Rust repositories.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

use allow_core::{CargoAllowError, CargoAllowResult};
use allow_report::{AdvisoryClass, ReportContext, Summary, advisory_count_for_deny_field};

pub(crate) fn validate_deny_statuses(
    statuses: &[String],
    summary: &Summary,
    context: ReportContext<'_>,
) -> CargoAllowResult<()> {
    let supported = AdvisoryClass::receipt_fields(summary, context)
        .into_iter()
        .map(|(class, _)| class.field_name())
        .collect::<Vec<_>>();
    for status in statuses {
        if !supported.iter().any(|field| field == status) {
            return Err(CargoAllowError::new(format!(
                "unknown --deny status `{status}`; supported advisory classes: {}",
                supported.join(", ")
            )));
        }
    }
    Ok(())
}

pub(crate) fn deny_escalation_failed(
    deny: &[String],
    summary: &Summary,
    context: ReportContext<'_>,
) -> bool {
    deny.iter().any(|status| {
        advisory_count_for_deny_field(summary, context, status).is_some_and(|count| count > 0)
    })
}

#[cfg(test)]
#[path = "check_deny_tests.rs"]
mod tests;