chore(gha): setup cargo-deny (#614)

Author: JohnTitor

.github/workflows/ci.yml

@@ -57,6 +57,10 @@ jobs:
         if: matrix.version.name == 'msrv'
         run: just downgrade-for-msrv
 
+      - name: deny check
+        if: matrix.version.name == 'stable' && matrix.target.os == 'ubuntu-latest'
+        uses: EmbarkStudios/cargo-deny-action@f2ba7abc2abebaf185c833c3961145a3c275caad # v2.0.13
+
       - name: check minimal
         run: cargo ci-min
 

deny.toml

@@ -0,0 +1,17 @@
+[licenses]
+confidence-threshold = 0.90
+allow = [
+    "Apache-2.0",
+    "MIT",
+    "Unicode-3.0",
+    "BSD-3-Clause",
+    "Zlib",
+    "ISC",
+]
+private = { ignore = true }
+
+[bans]
+multiple-versions = "allow"
+
+[bans.build]
+executables = "deny"