From 86ee51dc45aa3ab4e145c20fda58431833efb662 Mon Sep 17 00:00:00 2001 From: Harsh Shandilya Date: Sat, 11 Mar 2023 00:31:04 +0000 Subject: [PATCH] feat(cargo): migrate to cargo-audit --- .cargo/audit.toml | 5 +++++ .gitignore | 1 + deny.toml | 48 ----------------------------------------------- flake.nix | 9 +-------- 4 files changed, 7 insertions(+), 56 deletions(-) create mode 100644 .cargo/audit.toml delete mode 100644 deny.toml diff --git a/.cargo/audit.toml b/.cargo/audit.toml new file mode 100644 index 0000000..72008c3 --- /dev/null +++ b/.cargo/audit.toml @@ -0,0 +1,5 @@ +[advisories] +ignore = [ + "RUSTSEC-2023-0018", + "RUSTSEC-2021-0019" +] diff --git a/.gitignore b/.gitignore index d81f12e..8807164 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,3 @@ /target /.idea +/result diff --git a/deny.toml b/deny.toml deleted file mode 100644 index ca1d935..0000000 --- a/deny.toml +++ /dev/null @@ -1,48 +0,0 @@ -targets = [ - { triple = "x86_64-unknown-linux-gnu" }, - { triple = "aarch64-unknown-linux-gnu" }, - { triple = "x86_64-unknown-linux-musl" }, - { triple = "aarch64-apple-darwin" }, - { triple = "x86_64-apple-darwin" }, - { triple = "x86_64-pc-windows-msvc" }, -] - -[advisories] -db-path = "~/.cargo/advisory-db" -db-urls = ["https://github.com/rustsec/advisory-db"] -vulnerability = "deny" -unmaintained = "warn" -yanked = "warn" -notice = "warn" -ignore = [ - # multiple unsoundness problems with xcb - "RUSTSEC-2021-0019", - "RUSTSEC-2020-0097", -] -[licenses] -unlicensed = "deny" -allow = [ - "MIT", - "Apache-2.0", -] -copyleft = "allow" -allow-osi-fsf-free = "neither" -default = "deny" -confidence-threshold = 0.8 -exceptions = [ - { allow = ["BSL-1.0"], name = "lazy-bytes-cast", version = ">=5.0.1" }, - { allow = ["Unicode-DFS-2016"], name = "unicode-ident", version = "*" }, -] - -[licenses.private] -ignore = false - -[bans] -multiple-versions = "deny" -wildcards = "deny" -highlight = "all" - -[sources] -unknown-registry = "deny" -unknown-git = "deny" -allow-git = [] diff --git a/flake.nix b/flake.nix index f4f97c4..736910b 100644 --- a/flake.nix +++ b/flake.nix @@ -80,14 +80,7 @@ }); in { checks = { - # TODO: migrate to cargo-audit - # clipboard-substitutor-audit - inherit - clipboard-substitutor - clipboard-substitutor-clippy - clipboard-substitutor-fmt - clipboard-substitutor-nextest - ; + inherit clipboard-substitutor clipboard-substitutor-audit clipboard-substitutor-clippy clipboard-substitutor-fmt clipboard-substitutor-nextest; }; packages.default = clipboard-substitutor;