chore: add license and security check (#571)

Author: qevolg

.github/workflows/audit.yml

@@ -0,0 +1,20 @@
+name: Security Audit
+
+on:
+  push:
+  schedule:
+    - cron: "0 0 * * *"
+
+permissions:
+  contents: read
+
+jobs:
+  cargo-deny:
+    permissions:
+      checks: write
+      contents: read
+      issues: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: EmbarkStudios/cargo-deny-action@v2

deny.toml

@@ -0,0 +1,27 @@
+[advisories]
+unmaintained = "none"
+
+[licenses]
+allow = [
+    "Apache-2.0",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "ISC",
+    "MIT",
+    "MPL-2.0",
+    "Unicode-3.0",
+    "Zlib",
+]
+exceptions = [{ allow = ["OpenSSL"], name = "aws-lc-sys" }]
+
+[bans]
+multiple-versions = "allow"
+wildcards = "deny"
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"
+allow-git = [
+    "https://github.com/taosdata/tokio-tungstenite.git",
+    "https://github.com/taosdata/tungstenite-rs.git",
+]

taos-log/Cargo.toml

@@ -2,9 +2,10 @@
 name = "taos-log"
 version = "0.1.0"
 edition = "2021"
+license.workspace = true
 
 [dependencies]
-tracing = { version = "*", default-features = false }
+tracing = { version = "0.1", default-features = false }
 tracing-subscriber = { version = "0.3.20", default-features = false, features = [
     "fmt",
     "std",
@@ -25,8 +26,8 @@ crossbeam = "0.8.4"
 log = "0.4.22"
 rand = "0.8.5"
 tempfile = "3.21.0"
-tokio = { version = "*", features = ["full"] }
-tracing = { version = "*", features = ["log"] }
+tokio = { version = "1", features = ["full"] }
+tracing = { version = "0.1", features = ["log"] }
 tracing-log = "0.2.0"
 
 [features]

taos-macros/examples/macros-demo/Cargo.toml

@@ -3,14 +3,8 @@ name = "macros-demo"
 version = "0.1.0"
 edition = "2021"
 
-# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
-[workspace]
-
-[dependencies]
 
 [dev-dependencies]
-
 taos-macros = { path = "../../" }
 taos = { path = "../../../taos", features = ["test"] }
-
-tokio = "*"
+tokio = "1"

taos-query/Cargo.toml

@@ -78,7 +78,7 @@ hmac = { version = "0.12.1", optional = true }
 rand = { version = "0.9.1", optional = true }
 sha1 = { version = "0.10.6", optional = true }
 sha2 = { version = "0.10.9", optional = true }
-tokio-tungstenite = { git = "https://github.com/taosdata/tokio-tungstenite.git", rev = "3420353", optional = true }
+tokio-tungstenite = { git = "https://github.com/taosdata/tokio-tungstenite.git", version = "0.23.1", rev = "3420353", optional = true }
 
 [dev-dependencies]
 flate2 = "1"

taos-ws-sys/Cargo.toml

@@ -3,6 +3,7 @@ name = "taos-ws-sys"
 version = "0.2.2"
 edition = "2021"
 publish = false
+license.workspace = true
 
 [lib]
 name = "taosws"
@@ -50,7 +51,7 @@ taos-query = { version = "0.12.4", path = "../taos-query", default-features = fa
     "async",
     "test",
 ] }
-tokio-tungstenite = { git = "https://github.com/taosdata/tokio-tungstenite.git", rev = "3420353" }
+tokio-tungstenite = { git = "https://github.com/taosdata/tokio-tungstenite.git", version = "0.23.1", rev = "3420353" }
 
 [features]
 default = ["rustls-ring-crypto-provider"]

taos-ws/Cargo.toml

@@ -47,6 +47,7 @@ tracing = { version = "0.1", features = ["log"] }
 
 [dependencies.tokio-tungstenite]
 git = "https://github.com/taosdata/tokio-tungstenite.git"
+version = "0.23.1"
 rev = "3420353"
 
 [dev-dependencies]