deny.toml

[graph]
targets = [
    { triple = "x86_64-unknown-linux-gnu" },
    { triple = "aarch64-unknown-linux-gnu" },
    { triple = "armv7-unknown-linux-gnu" },
]

[advisories]
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
ignore = [
    # Pending kube update
    "RUSTSEC-2024-0384",
    "RUSTSEC-2024-0388",
]

[licenses]
allow = ["Apache-2.0", "BSD-3-Clause", "MIT"]
confidence-threshold = 0.8

# The Unicode-DFS-2016 license is necessary for unicode-ident because they
# use data from the unicode tables to generate the tables which are
# included in the application. We do not distribute those data files so
# this is not a problem for us. See https://github.com/dtolnay/unicode-ident/pull/9/files
[[licenses.exceptions]]
allow = ["Unicode-DFS-2016"]
name = "unicode-ident"
version = "*"

[bans]
multiple-versions = "deny"
# Wildcard dependencies are used for all workspace-local crates.
wildcards = "allow"
highlight = "all"
skip-tree = []
skip = [
    # `rustls-pemfile` and `k8s-openapi` depend on versions of `base64` that
    # have diverged significantly.
    { name = "base64" },
    # `tower-http` (a transitive dep via `kubert`) depends on v2.x of `bitflags`,
    # while pretty much the entire rest of the world is still on v1.x
    { name = "bitflags", version = "1.0" },
    # `tracing-subscriber` depends on `matchers` and `regex`, which depend on
    # different versions of `regex-automata` and `regex-syntax`
    { name = "regex-automata" },
    { name = "regex-syntax" },
    # syn v2 has been released and some libraries are slower to adopt it
    { name = "syn", version = "1.0" },
    # `hyper` and `tokio` depend on different `socket2` versions
    { name = "socket2" },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []