feat: add cargo-deny (#1929)

Author: haecker-felix

.gitignore

@@ -4,6 +4,7 @@ target/
 .idea/
 __pycache__/
 .pytest_cache/
+.DS_STORE
 
 # mkdocs
 .cache

deny.toml

@@ -0,0 +1,19 @@
+[licenses]
+allow = [
+    "0BSD",
+    "Apache-2.0 WITH LLVM-exception",
+    "Apache-2.0",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "BSL-1.0",
+    "bzip2-1.0.6",
+    "CC0-1.0",
+    "CDLA-Permissive-2.0",
+    "ISC",
+    "MIT",
+    "MPL-2.0",
+    "Unicode-3.0",
+    "Zlib",
+]
+confidence-threshold = 0.8
+private = { ignore = true }

lefthook.yaml

@@ -21,6 +21,10 @@ pre-commit:
   jobs:
     - name: actionlint
       run: pixi {run} actionlint
+    - name: cargo-deny
+      glob: "Cargo.lock,Cargo.toml"
+      stage_fixed: true
+      run: pixi {run} cargo-deny
     - name: cargo-fmt
       glob: "*.rs"
       stage_fixed: true

pixi.lock

@@ -46,16 +46,18 @@ boto3 = "*"
 
 [feature.lint.dependencies]
 actionlint = ">=1.7.4,<2"
+cargo-deny = ">=0.18.3,<0.19"
+dprint = ">=0.50.0,<0.51"
+lefthook = ">=1.12.2,<2"
 ruff = ">=0.4.8,<0.5"
 shellcheck = ">=0.10.0,<0.11"
 taplo = ">=0.9.1,<0.10"
 typos = ">=1.23.1,<2"
-lefthook = ">=1.12.2,<2"
-dprint = ">=0.50.0,<0.51"
 
 [feature.lint.tasks]
 actionlint = { cmd = "actionlint", env = { SHELLCHECK_OPTS = "-e SC2086" } }
 cargo-clippy = "cargo clippy --all-targets --all-features --workspace -- -D warnings -Dclippy::dbg_macro"
+cargo-deny = "cargo deny --workspace check license --deny warnings"
 cargo-fmt = "cargo fmt"
 dprint-check = { cmd = "dprint check --log-level=silent", description = "Check formatting with dprint" }
 dprint-fmt = { cmd = "dprint fmt --incremental=false", description = "Format with dprint" }

pixi.toml

@@ -2,6 +2,7 @@
 name = "rust-tests"
 version = "0.1.0"
 edition = "2024"
+license = "BSD-3-Clause"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html