@@ -48,7 +48,9 @@ notice = "warn"
4848# A list of advisory IDs to ignore. Note that ignored advisories will still
4949# output a note when they are encountered.
5050ignore = [
51- # "RUSTSEC-0000-0000",
51+ # git2 (build dependency)
52+ " RUSTSEC-2023-0002" ,
53+ " RUSTSEC-2023-0003" ,
5254]
5355# Threshold for security vulnerabilities, any vulnerability with a CVSS score
5456# lower than the range specified will be ignored. Note that ignored advisories
@@ -83,6 +85,7 @@ allow = [
8385 " 0BSD" ,
8486 " OFL-1.1" ,
8587 " LicenseRef-UFL-1.0" ,
88+ " OpenSSL" ,
8689]
8790# List of explictly disallowed licenses
8891# See https://spdx.org/licenses/ for list of possible licenses
@@ -120,22 +123,22 @@ exceptions = [
120123# Some crates don't have (easily) machine readable licensing information,
121124# adding a clarification entry for it allows you to manually specify the
122125# licensing information
123- # [[licenses.clarify]]
126+ [[licenses .clarify ]]
124127# The name of the crate the clarification applies to
125- # name = "ring"
128+ name = " ring"
126129# The optional version constraint for the crate
127- # version = "*"
130+ version = " *"
128131# The SPDX expression for the license requirements of the crate
129- # expression = "MIT AND ISC AND OpenSSL"
132+ expression = " MIT AND ISC AND OpenSSL"
130133# One or more files in the crate's source used as the "source of truth" for
131134# the license expression. If the contents match, the clarification will be used
132135# when running the license check, otherwise the clarification will be ignored
133136# and the crate will be checked normally, which may produce warnings or errors
134137# depending on the rest of your configuration
135- # license-files = [
138+ license-files = [
136139 # Each entry is a crate relative path, and the (opaque) hash of its contents
137- # { path = "LICENSE", hash = 0xbd0eed23 }
138- # ]
140+ { path = " LICENSE" , hash = 0xbd0eed23 }
141+ ]
139142
140143[licenses .private ]
141144# If true, ignores workspace crates that aren't published, or are only
0 commit comments