deny.toml

[advisories]
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
ignore = [
]

[licenses]
allow = [
    "Apache-2.0",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "MIT",
    "OpenSSL",
    "Unicode-3.0",
    "Zlib",
]
confidence-threshold = 0.8
exceptions = [
    { allow = [
        "ISC",
        "MIT",
        "OpenSSL",
    ], name = "ring", version = "*" },
]

[[licenses.clarify]]
name = "ring"
version = "*"
expression = "MIT AND ISC AND OpenSSL"
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]

[bans]
skip-tree = [
    { name = "windows-sys" },
    { name = "windows_aarch64_msvc" },
    { name = "windows_i686_gnu" },
    { name = "windows_i686_msvc" },
    { name = "windows_x86_64_gnu" },
    { name = "windows_x86_64_msvc" },
    # tracing-subscriber needs an older regex-automata.
    { name = "regex-automata" },
    # `serde_json` and `serde_yaml` depend on incompatible versions of indexmap
    { name = "indexmap" },
    # the proc-macro ecosystem is still in the process of migrating from `syn`
    # 1.0 to `syn` 2.0
    { name = "syn" },
    # `parking-lot-core` and `dirs-next` (transitive deps via `kube-client`)
    # depend on incompatible versions of `redox_syscall`.
    { name = "redox_syscall" },
    # Until thiserror v2 is widely used.
    { name = "thiserror", version = "1" },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []