Switch from cargo-audit to cargo-deny

This provides a superset of the features, including license checks.

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer-rs/issues/238

.gitlab-ci.yml

@@ -35,7 +35,7 @@ stages:
 .debian:10:
   variables:
     FDO_DISTRIBUTION_VERSION: 10
-    FDO_DISTRIBUTION_TAG: '$RUST_VERSION-2020-04-16.1'
+    FDO_DISTRIBUTION_TAG: '$RUST_VERSION-2020-04-16.2'
     # Only stuff inside the repo directory can be cached
     # Override the CARGO_HOME variable to force its location
     CARGO_HOME: "${CI_PROJECT_DIR}/.cargo_home"
@@ -205,13 +205,13 @@ clippy:
       cargo clippy --color=always --manifest-path examples/Cargo.toml --all-targets --all-features -- -A clippy::redundant_pattern_matching -A clippy::single_match -A clippy::cast_lossless -A clippy::missing_safety_doc
       cargo clippy --color=always --manifest-path tutorials/Cargo.toml --all-targets --all-features -- -A clippy::redundant_pattern_matching -A clippy::single_match -A clippy::cast_lossless -A clippy::missing_safety_doc
 
-audit:
+deny:
   extends: .img-stable
   stage: 'extras'
   only:
     - schedules
   script:
-    - cargo audit --deny-warnings
+    - cargo deny check
 
 gir-checks:
   extends: .img-stable

ci/install-rust.sh

@@ -19,6 +19,6 @@ rustc --version
 if [ "$RUST_VERSION" = "stable" ]; then
   rustup component add clippy-preview
   rustup component add rustfmt
-  cargo install --force cargo-audit
+  cargo install --force cargo-deny
   cargo install --force --git https://github.com/kbknapp/cargo-outdated
 fi

deny.toml

@@ -0,0 +1,44 @@
+[advisories]
+db-path = "~/.cargo/advisory-db"
+db-url = "https://github.com/rustsec/advisory-db"
+vulnerability = "deny"
+unmaintained = "warn"
+notice = "warn"
+ignore = []
+
+[licenses]
+unlicensed = "deny"
+allow = [
+  "Apache-2.0",
+]
+deny = [
+  "GPL-1.0",
+  "GPL-2.0",
+  "GPL-3.0",
+  "AGPL-1.0",
+  "AGPL-3.0",
+]
+copyleft = "deny"
+allow-osi-fsf-free = "either"
+confidence-threshold = 0.8
+
+[bans]
+multiple-versions = "warn"
+highlight = "all"
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"
+allow-git = [
+  "https://gitlab.freedesktop.org/gstreamer/gstreamer-rs-sys",
+  "https://github.com/gtk-rs/sys",
+  "https://github.com/gtk-rs/glib",
+  "https://github.com/gtk-rs/gio",
+  "https://github.com/gtk-rs/cairo",
+  "https://github.com/gtk-rs/pango",
+  "https://github.com/gtk-rs/pangocairo",
+  "https://github.com/gtk-rs/atk",
+  "https://github.com/gtk-rs/gdk-pixbuf",
+  "https://github.com/gtk-rs/gdk",
+  "https://github.com/gtk-rs/gtk",
+]