fix: switch to `cargo-audit`

This commit is contained in:
Harsh Shandilya 2023-03-06 19:45:12 +00:00
parent 4f46b536de
commit 5bfafd62d6
3 changed files with 3 additions and 60 deletions

2
.cargo/audit.toml Normal file
View File

@ -0,0 +1,2 @@
[advisories]
ignore = ["RUSTSEC-2020-0071"]

View File

@ -1,57 +0,0 @@
targets = [
{ triple = "x86_64-unknown-linux-gnu" },
{ triple = "aarch64-unknown-linux-gnu" },
{ triple = "x86_64-unknown-linux-musl" },
{ triple = "aarch64-apple-darwin" },
{ triple = "x86_64-apple-darwin" },
{ triple = "x86_64-pc-windows-msvc" },
]
[advisories]
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
vulnerability = "deny"
unmaintained = "warn"
yanked = "warn"
notice = "warn"
ignore = [
"RUSTSEC-2020-0071", # same localtime_r vulnerability, but for the time crate
]
[licenses]
unlicensed = "deny"
allow = [
"MIT",
"Apache-2.0",
]
copyleft = "allow"
allow-osi-fsf-free = "neither"
default = "deny"
confidence-threshold = 0.8
exceptions = [
{ allow = ["BSD-3-Clause"], name = "subtle", version = "*" },
{ allow = ["MIT", "ISC", "OpenSSL"], name = "ring", version = "*" },
{ allow = ["ISC"], name = "untrusted", version = "*" },
{ allow = ["ISC"], name = "webpki", version = "*" },
{ allow = ["Unicode-DFS-2016"], name = "unicode-ident", version = "*" },
]
[[licenses.clarify]]
name = "ring"
version = "*"
expression = "MIT AND ISC AND OpenSSL"
license-files = [
{ path = "LICENSE", hash = 0xbd0eed23 }
]
[licenses.private]
ignore = false
[bans]
multiple-versions = "deny"
wildcards = "deny"
highlight = "all"
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = []

View File

@ -74,9 +74,7 @@
};
in {
checks = {
# TODO: Switch to cargo-audit and re-enable this
# twt-audit
inherit twt twt-clippy twt-fmt twt-nextest;
inherit twt twt-audit twt-clippy twt-fmt twt-nextest;
};
packages.default = twt;