Files
steel-dev__cli/deny.toml

42 lines
868 B
TOML

[graph]
targets = [
"aarch64-apple-darwin",
"x86_64-apple-darwin",
"x86_64-unknown-linux-gnu",
"aarch64-unknown-linux-gnu",
]
[advisories]
# Transitive deps from agent-browser; we can't upgrade them directly.
ignore = [
"RUSTSEC-2024-0436", # paste unmaintained
"RUSTSEC-2023-0071", # rsa Marvin timing attack; russh pulls rsa for host-key verification only, the CLI never holds an RSA private key
]
[licenses]
allow = [
"MIT",
"Apache-2.0",
"MPL-2.0",
"Unicode-3.0",
"Zlib",
"ISC",
"BSD-2-Clause",
"BSD-3-Clause",
"CDLA-Permissive-2.0",
]
unused-allowed-license = "allow"
[licenses.private]
ignore = true
[bans]
multiple-versions = "warn"
wildcards = "warn"
allow-wildcard-paths = true
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = ["https://github.com/steel-dev/agent-browser"]