# syd's deny.toml

# Running without targets may result in false positives such as Windows
# dependencies creeping in as duplicates.
[graph]
targets = [
    { triple = "i686-unknown-linux-gnu" },
    { triple = "x86_64-unknown-linux-gnu" },
    { triple = "x86_64-unknown-linux-musl" },
]

[advisories]
git-fetch-with-cli = true
yanked = "deny"
# RUSTSEC-2024-0437: Vulnerable protobuf used only by the (currently)
# unsupported syd-oci checkpoint command.
# RUSTSEC-2024-0436: paste is unmaintained, transitive dep via
# netlink-packet-core. No safe upgrade available.
ignore = [
    "RUSTSEC-2024-0436",
    "RUSTSEC-2024-0437",
]

# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
[licenses]
allow = [
    "Apache-2.0",
    "0BSD",
    "BSD-3-Clause",
    "GPL-3.0-or-later",
    "GPL-3.0-only",
    "ISC",
    "MIT",
    "MPL-2.0",
    "Unicode-3.0",
    "Unlicense",
    "WTFPL",
    "Zlib",
]

# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
[bans]
# Lint level for when multiple versions of the same crate are detected
multiple-versions = "deny"
skip = [
    "bitflags",
    "dirs",
    "dirs-sys",
    "getrandom",
    "hashbrown",
    "indexmap",
    "linux-raw-sys",
    "nix",
    "nom",
    "procfs",
    "procfs-core",
    "rustix",
    "thiserror",
    "thiserror-impl",
    "unicode-width",
]

# https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
