Skip to content

Commit b09268a

Browse files
authored
feat(rust): Update deny.toml config, make unmaintained as warnings (#346)
* remove redundant RUST-SEC exception list * add new `allow-git` exceptions * make unmaintained issues like warnings
1 parent 702db9c commit b09268a

File tree

3 files changed

+9
-11
lines changed

3 files changed

+9
-11
lines changed

earthly/rust/scripts/std_checks.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,7 @@ def main():
104104
results.add(exec_manager.cli_run("cargo machete", name="Unused Dependencies Check"))
105105
# Check if we have any supply chain issues with dependencies.
106106
results.add(
107-
exec_manager.cli_run("cargo deny check --exclude-dev -W vulnerability", name="Supply Chain Issues Check")
107+
exec_manager.cli_run("cargo deny check --exclude-dev -W vulnerability -W unmaintained", name="Supply Chain Issues Check")
108108
)
109109

110110
results.print()

earthly/rust/stdcfgs/deny.toml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,7 @@ targets = [
1616

1717
[advisories]
1818
version = 2
19-
ignore = [
20-
{ id = "RUSTSEC-2020-0168", reason = "`mach` is used by wasmtime and we have no control over that." },
21-
{ id = "RUSTSEC-2021-0145", reason = "we don't target windows, and don't use a custom global allocator." },
22-
{ id = "RUSTSEC-2024-0370", reason = "`proc-macro-error` is used by crates we rely on, we can't control what they use."},
23-
]
19+
ignore = []
2420

2521
[bans]
2622
multiple-versions = "warn"
@@ -58,6 +54,9 @@ allow-git = [
5854
"https://github.com/input-output-hk/catalyst-mithril.git",
5955
"https://github.com/bytecodealliance/wasmtime",
6056
"https://github.com/aldanor/hdf5-rust",
57+
"https://github.com/txpipe/vrf",
58+
"https://github.com/txpipe/kes",
59+
"https://github.com/txpipe/curve25519-dalek",
6160
]
6261

6362
[licenses]

examples/rust/deny.toml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,7 @@ targets = [
1616

1717
[advisories]
1818
version = 2
19-
ignore = [
20-
{ id = "RUSTSEC-2020-0168", reason = "`mach` is used by wasmtime and we have no control over that." },
21-
{ id = "RUSTSEC-2021-0145", reason = "we don't target windows, and don't use a custom global allocator." },
22-
{ id = "RUSTSEC-2024-0370", reason = "`proc-macro-error` is used by crates we rely on, we can't control what they use."},
23-
]
19+
ignore = []
2420

2521
[bans]
2622
multiple-versions = "warn"
@@ -58,6 +54,9 @@ allow-git = [
5854
"https://github.com/input-output-hk/catalyst-mithril.git",
5955
"https://github.com/bytecodealliance/wasmtime",
6056
"https://github.com/aldanor/hdf5-rust",
57+
"https://github.com/txpipe/vrf",
58+
"https://github.com/txpipe/kes",
59+
"https://github.com/txpipe/curve25519-dalek",
6160
]
6261

6362
[licenses]

0 commit comments

Comments
 (0)