ci: add 'cargo deny' in schedules jobs

Fix #20

.gitlab-ci.yml

@@ -102,3 +102,11 @@ outdated:
     - schedules
   script:
     - cargo outdated --root-deps-only --exit-code 1 -v
+
+deny:
+  extends: .img-stable
+  stage: 'extras'
+  only:
+    - schedules
+  script:
+    - cargo deny check

deny.toml

@@ -0,0 +1,34 @@
+[advisories]
+db-path = "~/.cargo/advisory-db"
+db-url = "https://github.com/rustsec/advisory-db"
+vulnerability = "deny"
+unmaintained = "warn"
+notice = "warn"
+ignore = []
+
+[licenses]
+unlicensed = "deny"
+allow = [
+  "Apache-2.0",
+]
+deny = [
+  "GPL-1.0",
+  "GPL-2.0",
+  "GPL-3.0",
+  "AGPL-1.0",
+  "AGPL-3.0",
+]
+copyleft = "deny"
+allow-osi-fsf-free = "either"
+confidence-threshold = 0.8
+
+[bans]
+multiple-versions = "warn"
+highlight = "all"
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"
+allow-git = [
+  "https://github.com/gtk-rs/sys",
+]