Andy DixonandClaude
cddde5ca52
build.sh builds the Rust targets with the Go-era names, refuses an OUT that is /, $HOME or the tree, checks static linking and names the Go targets Rust cannot build. packaging/package.sh builds and inspects packages without signing or publishing; repo.sh reuses it. Seven fuzz targets (one found a URL-parser panic, fixed here with a regression test), cargo-deny policy, CI for lint, tests on Linux/macOS/Windows, cross builds with qemu runs, supply chain and fuzzing. Compatibility specification and security notes. Co-Authored-By: Claude <noreply@anthropic.com>
34 lines
668 B
TOML
34 lines
668 B
TOML
# cargo-deny policy: run `cargo deny --locked check`.
|
|
|
|
[graph]
|
|
all-features = true
|
|
|
|
[advisories]
|
|
# Every advisory is an error unless listed here with a reason.
|
|
ignore = []
|
|
|
|
[licenses]
|
|
# Licences compatible with distributing vault under GPL-3.0-or-later.
|
|
allow = [
|
|
"Apache-2.0",
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"BSD-3-Clause",
|
|
"CDLA-Permissive-2.0",
|
|
"GPL-3.0-or-later",
|
|
"ISC",
|
|
"MIT",
|
|
"Unicode-3.0",
|
|
"Unlicense",
|
|
"Zlib",
|
|
]
|
|
confidence-threshold = 0.9
|
|
|
|
[bans]
|
|
multiple-versions = "warn"
|
|
wildcards = "deny"
|
|
|
|
[sources]
|
|
unknown-registry = "deny"
|
|
unknown-git = "deny"
|
|
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|