@@ -48,7 +48,9 @@ notice = "warn"
48
48
# A list of advisory IDs to ignore. Note that ignored advisories will still
49
49
# output a note when they are encountered.
50
50
ignore = [
51
- # "RUSTSEC-0000-0000",
51
+ # git2 (build dependency)
52
+ " RUSTSEC-2023-0002" ,
53
+ " RUSTSEC-2023-0003" ,
52
54
]
53
55
# Threshold for security vulnerabilities, any vulnerability with a CVSS score
54
56
# lower than the range specified will be ignored. Note that ignored advisories
@@ -83,6 +85,7 @@ allow = [
83
85
" 0BSD" ,
84
86
" OFL-1.1" ,
85
87
" LicenseRef-UFL-1.0" ,
88
+ " OpenSSL" ,
86
89
]
87
90
# List of explictly disallowed licenses
88
91
# See https://spdx.org/licenses/ for list of possible licenses
@@ -120,22 +123,22 @@ exceptions = [
120
123
# Some crates don't have (easily) machine readable licensing information,
121
124
# adding a clarification entry for it allows you to manually specify the
122
125
# licensing information
123
- # [[licenses.clarify]]
126
+ [[licenses .clarify ]]
124
127
# The name of the crate the clarification applies to
125
- # name = "ring"
128
+ name = " ring"
126
129
# The optional version constraint for the crate
127
- # version = "*"
130
+ version = " *"
128
131
# The SPDX expression for the license requirements of the crate
129
- # expression = "MIT AND ISC AND OpenSSL"
132
+ expression = " MIT AND ISC AND OpenSSL"
130
133
# One or more files in the crate's source used as the "source of truth" for
131
134
# the license expression. If the contents match, the clarification will be used
132
135
# when running the license check, otherwise the clarification will be ignored
133
136
# and the crate will be checked normally, which may produce warnings or errors
134
137
# depending on the rest of your configuration
135
- # license-files = [
138
+ license-files = [
136
139
# Each entry is a crate relative path, and the (opaque) hash of its contents
137
- # { path = "LICENSE", hash = 0xbd0eed23 }
138
- # ]
140
+ { path = " LICENSE" , hash = 0xbd0eed23 }
141
+ ]
139
142
140
143
[licenses .private ]
141
144
# If true, ignores workspace crates that aren't published, or are only
0 commit comments