wip

Author: Mr-Leshiy

Earthfile

@@ -1,7 +1,7 @@
 VERSION 0.8
 
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/mdlint:feat/cargo-deny-check AS mdlint-ci
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/cspell:feat/cargo-deny-check AS cspell-ci
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/mdlint:feat/deny.toml AS mdlint-ci
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/cspell:feat/deny.toml AS cspell-ci
 
 FROM debian:stable-slim
 

docs/Earthfile

@@ -1,6 +1,6 @@
 VERSION 0.8
 
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/docs:feat/cargo-deny-check AS docs-ci
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/docs:feat/deny.toml AS docs-ci
 
 IMPORT .. AS repo
 

rust/Earthfile

@@ -1,6 +1,6 @@
 VERSION 0.8
 
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:feat/cargo-deny-check AS rust-ci
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust:feat/deny.toml AS rust-ci
 
 COPY_SRC:
     FUNCTION

rust/c509-certificate/Earthfile

@@ -1,6 +1,6 @@
 VERSION 0.8
 
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust::feat/cargo-deny-check AS rust-ci
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust::feat/deny.toml AS rust-ci
 
 IMPORT .. AS rust-local
 IMPORT ../.. AS repo

rust/cbork/Earthfile

@@ -1,6 +1,6 @@
 VERSION 0.8
 
-IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust::feat/cargo-deny-check AS rust-ci
+IMPORT github.com/input-output-hk/catalyst-ci/earthly/rust::feat/deny.toml AS rust-ci
 
 IMPORT .. AS rust-local
 

rust/deny.toml

@@ -16,9 +16,7 @@ targets = [
 
 [advisories]
 version = 2
-ignore = [
-    { id = "RUSTSEC-2024-0370", reason = "`proc-macro-error` is used by crates we rely on, we can't control what they use."},
-]
+ignore = []
 
 [bans]
 multiple-versions = "warn"
@@ -34,7 +32,13 @@ deny = [
     # { crate = "cmake", use-instead = "cc" },
     # { crate = "windows", reason = "bloated and unnecessary", use-instead = "ideally inline bindings, practically, windows-sys" },
 ]
-skip = []
+skip = [
+    # { crate = "[email protected]", reason = "https://github.com/seanmonstar/reqwest/pull/2130 should be in the next version" },
+    # { crate = "[email protected]", reason = "gix 0.59 was yanked, see https://github.com/Byron/gitoxide/issues/1309" },
+    # { crate = "[email protected]", reason = "strum_macros uses this old version" },
+    # { crate = "[email protected]", reason = "gix-transport pulls in this old version, as well as a newer version via reqwest" },
+    # { crate = "[email protected]", reason = "gix-transport pulls in this old version, as well as a newer version via reqwest" },
+]
 skip-tree = [
     { crate = "[email protected]", reason = "a foundational crate for many that bumps far too frequently to ever have a shared version" },
 ]
@@ -47,6 +51,12 @@ unknown-git = "deny"
 allow-git = [
     "https://github.com/input-output-hk/catalyst-libs.git",
     "https://github.com/input-output-hk/catalyst-pallas.git",
+    "https://github.com/input-output-hk/catalyst-mithril.git",
+    "https://github.com/bytecodealliance/wasmtime",
+    "https://github.com/aldanor/hdf5-rust",
+    "https://github.com/txpipe/vrf",
+    "https://github.com/txpipe/kes",
+    "https://github.com/txpipe/curve25519-dalek",
 ]
 
 [licenses]