diff --git a/deny.toml b/deny.toml index a074f98cd..f1639d753 100644 --- a/deny.toml +++ b/deny.toml @@ -1,3 +1,4 @@ +[graph] targets = [ # Desktop { triple = "x86_64-unknown-linux-gnu" }, @@ -19,28 +20,19 @@ targets = [ ] [advisories] -vulnerability = "deny" +version = 2 ignore = [ - # ? `sodiumoxide` is only used in tests - "RUSTSEC-2021-0137", - # ? There's no fix currently for the Marvin attack - # - https://github.com/RustCrypto/RSA/issues/390 - # -https://github.com/RustCrypto/RSA/pull/394 - "RUSTSEC-2023-0071", - # ? Only used in webdriver-installation - "RUSTSEC-2023-0072" + # `sodiumoxide` is only used in tests + "RUSTSEC-2021-0137" ] [bans] multiple-versions = "allow" [licenses] -unlicensed = "deny" -allow-osi-fsf-free = "both" -copyleft = "allow" -unused-allowed-license = "warn" -confidence-threshold = 0.93 -allow = ["Apache-2.0", "MIT", "MPL-2.0", "GPL-3.0", "CC0-1.0"] +version = 2 +allow = ["Apache-2.0", "MIT", "MPL-2.0", "GPL-3.0", "CC0-1.0", "BSD-3-Clause", + "Apache-2.0 WITH LLVM-exception", "ISC", "Zlib"] exceptions = [ { allow = ["Unicode-DFS-2016"], name = "unicode-ident" }, ] @@ -50,12 +42,5 @@ name = "pkiprocmacros" expression = "Apache-2.0 OR MIT" license-files = [] -[[licenses.clarify]] -name = "encoding_rs" -expression = "MIT OR Apache-2.0" -license-files = [ - { path = "COPYRIGHT", hash = 0x39f8ad31 } -] - [sources.allow-org] github = ["wireapp"]