From e527f5f065bc384515929ccec497d66ad85830d1 Mon Sep 17 00:00:00 2001
From: Dirkjan Ochtman <dirkjan@ochtman.nl>
Date: Fri, 29 Sep 2023 14:00:42 +0200
Subject: Add audit job in CI workflow

---
 .github/workflows/rust.yml |  6 ++++++
 deny.toml                  | 10 ++++++++++
 2 files changed, 16 insertions(+)
 create mode 100644 deny.toml

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index aca9e9f..77eb07d 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -53,3 +53,9 @@ jobs:
       - uses: Swatinem/rust-cache@v2
       - run: cargo fmt --all -- --check
       - run: cargo clippy --all-targets -- -D warnings
+
+  Audit:
+    runs-on: ubuntu-22.04
+    steps:
+    - uses: actions/checkout@v4
+    - uses: EmbarkStudios/cargo-deny-action@v1
diff --git a/deny.toml b/deny.toml
new file mode 100644
index 0000000..c5d2843
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,10 @@
+[licenses]
+allow-osi-fsf-free = "either"
+copyleft = "warn"
+exceptions = [{ allow = ["ISC", "MIT", "OpenSSL"], name = "ring" }]
+private = { ignore = true }
+
+[[licenses.clarify]]
+name = "ring"
+expression = "ISC AND MIT AND OpenSSL"
+license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
-- 
cgit