-
Notifications
You must be signed in to change notification settings - Fork 3
Expand file tree
/
Copy pathdeny.toml
More file actions
52 lines (49 loc) · 1.7 KB
/
Copy pathdeny.toml
File metadata and controls
52 lines (49 loc) · 1.7 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
[advisories]
version = 2
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
ignore = [
# rustls-pemfile unmaintained — transitive dep, awaiting upstream migration
"RUSTSEC-2025-0134",
# rustls-webpki cert-verification vulns — after bumping our own TLS stack
# to rustls-webpki 0.103.13, these now match ONLY the old 0.102.8 still
# pulled via opensrv-mysql 0.7.0 (latest) -> tokio-rustls 0.25 ->
# rustls 0.22, a litewire transitive dep. opensrv-mysql uses rustls only
# for server-side MySQL TLS, which does not exercise the name-constraint /
# CRL verification paths these advisories concern. Drop once opensrv-mysql
# moves to rustls 0.23 (or litewire replaces it).
"RUSTSEC-2026-0049",
"RUSTSEC-2026-0098",
"RUSTSEC-2026-0099",
"RUSTSEC-2026-0104",
# proc-macro-error2 unmaintained — pulled transitively by
# mysql-common-derive -> mysql_common -> mysql_async / opensrv-mysql.
# Compile-time-only (proc macro), no runtime exposure. Awaiting
# upstream migration to manyhow / proc-macro2-diagnostics.
"RUSTSEC-2026-0173",
]
[licenses]
version = 2
allow = [
"MIT",
"Apache-2.0",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Unicode-3.0",
"Zlib",
"CDLA-Permissive-2.0",
"Apache-2.0 WITH LLVM-exception",
]
confidence-threshold = 0.8
exceptions = [
{ allow = ["MIT"], name = "xtask", version = "*" },
]
[bans]
multiple-versions = "warn"
wildcards = "allow"
[sources]
unknown-registry = "warn"
unknown-git = "warn"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = ["https://github.com/ephpm/litewire.git"]