mirror of
https://github.com/telemt/telemt.git
synced 2026-06-19 02:00:08 +07:00
David Osipov
2bd9036908
- Add deny.toml with license/advisory policy for cargo-deny - Add security.yml GitHub Actions workflow for automated audit - Update rust.yml with hardened clippy lint enforcement - Update Cargo.toml/Cargo.lock with audit-related dependency additions - Fix clippy lint placement in config.toml (Clippy lints must not live in rustflags) Part of PR-SEC-1: no Rust source changes, establishes CI gates for all subsequent PRs.
15 lines
390 B
TOML
15 lines
390 B
TOML
[bans]
|
|
multiple-versions = "deny"
|
|
wildcards = "allow"
|
|
highlight = "all"
|
|
|
|
# Explicitly flag the weak cryptography so the agent is forced to justify its existence
|
|
[[bans.skip]]
|
|
name = "md-5"
|
|
version = "*"
|
|
reason = "MUST VERIFY: Only allowed for legacy checksums, never for security."
|
|
|
|
[[bans.skip]]
|
|
name = "sha1"
|
|
version = "*"
|
|
reason = "MUST VERIFY: Only allowed for backwards compatibility." |