c2pa-rs

commit 65658b420d51a9d5a28de9de35c30c236158cfb2
parent 7321899891c05d4a239b8598ea83b1c653612c90
Author: Eric Scouten <scouten@adobe.com>
Date:   Thu, 28 Mar 2024 18:34:38 -0700

(IGNORE) Update for recent changes to cargo-deny (#436)


Diffstat:
M
deny.toml
 | 
16
++--------------

1 file changed, 2 insertions(+), 14 deletions(-)
diff --git a/deny.toml b/deny.toml
@@ -3,6 +3,7 @@
 # For further details on all configuration options see:
 # https://embarkstudios.github.io/cargo-deny/checks/cfg.html
 
+[graph]
 targets = [
     { triple = "x86_64-unknown-linux-gnu" },
     { triple = "x86_64-apple-darwin" },
@@ -11,27 +12,16 @@ targets = [
     { triple = "wasm32-unknown-unknown" },
 ]
 
-# Deny all advisories unless explicitly ignored.
 [advisories]
-vulnerability = "deny"
-unmaintained = "deny"
 yanked = "deny"
-notice = "deny"
 
 ignore = [
   "RUSTSEC-2021-0127", # serde_cbor
-  "RUSTSEC-2022-0081", # json (see https://github.com/contentauth/c2pa-rs/issues/318)
   "RUSTSEC-2023-0071", # rsa Marvin Attack: (https://jira.corp.adobe.com/browse/CAI-5104)
 ]
 
-# Deny multiple versions unless explicitly skipped.
 [bans]
 multiple-versions = "allow"
-# multiple-versions = "deny"
-
-wildcards = "allow"
-  # I'd rather have this be "deny", but the local path ref in make_test_images
-  # falsely reports as a wildcard. (See https://github.com/contentauth/c2pa-rs/issues/234.)
 
 [licenses]
 allow = [
@@ -46,9 +36,7 @@ allow = [
   "Unicode-DFS-2016",
   "Zlib",
 ]
-copyleft = "deny"
-unlicensed = "deny"
-confidence-threshold = 0.8
+confidence-threshold = 0.9
 
 [[licenses.clarify]]
 name = "ring"