ci: add 'cargo deny' in schedules jobs

Fix #20
This commit is contained in:
Guillaume Desmottes 2020-04-27 14:21:22 +02:00
parent 299f8b5927
commit acde0bab70
2 changed files with 42 additions and 0 deletions

View file

@ -102,3 +102,11 @@ outdated:
- schedules
script:
- cargo outdated --root-deps-only --exit-code 1 -v
deny:
extends: .img-stable
stage: 'extras'
only:
- schedules
script:
- cargo deny check

34
deny.toml Normal file
View file

@ -0,0 +1,34 @@
[advisories]
db-path = "~/.cargo/advisory-db"
db-url = "https://github.com/rustsec/advisory-db"
vulnerability = "deny"
unmaintained = "warn"
notice = "warn"
ignore = []
[licenses]
unlicensed = "deny"
allow = [
"Apache-2.0",
]
deny = [
"GPL-1.0",
"GPL-2.0",
"GPL-3.0",
"AGPL-1.0",
"AGPL-3.0",
]
copyleft = "deny"
allow-osi-fsf-free = "either"
confidence-threshold = 0.8
[bans]
multiple-versions = "warn"
highlight = "all"
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = [
"https://github.com/gtk-rs/sys",
]