Switch from cargo-audit to cargo-deny

This provides a superset of the features, including license checks.

Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer-rs/issues/238
This commit is contained in:
Sebastian Dröge 2020-02-02 11:19:12 +02:00 committed by Guillaume Desmottes
parent 99f91167af
commit 47d839e58a
3 changed files with 48 additions and 4 deletions

View file

@ -35,7 +35,7 @@ stages:
.debian:10: .debian:10:
variables: variables:
FDO_DISTRIBUTION_VERSION: 10 FDO_DISTRIBUTION_VERSION: 10
FDO_DISTRIBUTION_TAG: '$RUST_VERSION-2020-04-16.1' FDO_DISTRIBUTION_TAG: '$RUST_VERSION-2020-04-16.2'
# Only stuff inside the repo directory can be cached # Only stuff inside the repo directory can be cached
# Override the CARGO_HOME variable to force its location # Override the CARGO_HOME variable to force its location
CARGO_HOME: "${CI_PROJECT_DIR}/.cargo_home" CARGO_HOME: "${CI_PROJECT_DIR}/.cargo_home"
@ -205,13 +205,13 @@ clippy:
cargo clippy --color=always --manifest-path examples/Cargo.toml --all-targets --all-features -- -A clippy::redundant_pattern_matching -A clippy::single_match -A clippy::cast_lossless -A clippy::missing_safety_doc cargo clippy --color=always --manifest-path examples/Cargo.toml --all-targets --all-features -- -A clippy::redundant_pattern_matching -A clippy::single_match -A clippy::cast_lossless -A clippy::missing_safety_doc
cargo clippy --color=always --manifest-path tutorials/Cargo.toml --all-targets --all-features -- -A clippy::redundant_pattern_matching -A clippy::single_match -A clippy::cast_lossless -A clippy::missing_safety_doc cargo clippy --color=always --manifest-path tutorials/Cargo.toml --all-targets --all-features -- -A clippy::redundant_pattern_matching -A clippy::single_match -A clippy::cast_lossless -A clippy::missing_safety_doc
audit: deny:
extends: .img-stable extends: .img-stable
stage: 'extras' stage: 'extras'
only: only:
- schedules - schedules
script: script:
- cargo audit --deny-warnings - cargo deny check
gir-checks: gir-checks:
extends: .img-stable extends: .img-stable

View file

@ -19,6 +19,6 @@ rustc --version
if [ "$RUST_VERSION" = "stable" ]; then if [ "$RUST_VERSION" = "stable" ]; then
rustup component add clippy-preview rustup component add clippy-preview
rustup component add rustfmt rustup component add rustfmt
cargo install --force cargo-audit cargo install --force cargo-deny
cargo install --force --git https://github.com/kbknapp/cargo-outdated cargo install --force --git https://github.com/kbknapp/cargo-outdated
fi fi

44
deny.toml Normal file
View file

@ -0,0 +1,44 @@
[advisories]
db-path = "~/.cargo/advisory-db"
db-url = "https://github.com/rustsec/advisory-db"
vulnerability = "deny"
unmaintained = "warn"
notice = "warn"
ignore = []
[licenses]
unlicensed = "deny"
allow = [
"Apache-2.0",
]
deny = [
"GPL-1.0",
"GPL-2.0",
"GPL-3.0",
"AGPL-1.0",
"AGPL-3.0",
]
copyleft = "deny"
allow-osi-fsf-free = "either"
confidence-threshold = 0.8
[bans]
multiple-versions = "warn"
highlight = "all"
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = [
"https://gitlab.freedesktop.org/gstreamer/gstreamer-rs-sys",
"https://github.com/gtk-rs/sys",
"https://github.com/gtk-rs/glib",
"https://github.com/gtk-rs/gio",
"https://github.com/gtk-rs/cairo",
"https://github.com/gtk-rs/pango",
"https://github.com/gtk-rs/pangocairo",
"https://github.com/gtk-rs/atk",
"https://github.com/gtk-rs/gdk-pixbuf",
"https://github.com/gtk-rs/gdk",
"https://github.com/gtk-rs/gtk",
]