ci: Add cargo deny checks

.gitlab-ci.yml

@@ -16,7 +16,7 @@ flatpak@aarch64:
   allow_failure: true
   extends: ".flatpak@aarch64"
 
-rustfmt:
+cargo-fmt:
   image: "rust:slim"
   script:
     - rustup component add rustfmt
@@ -77,6 +77,13 @@ cargo-clippy:
         cargo clippy -- -D warnings
       END
 
+cargo-audit:
+  interruptible: true
+  image: rust
+  script:
+    - cargo install cargo-deny
+    - cargo deny check
+
 pages:
   stage: deploy
   tags:

Cargo.toml

@@ -3,6 +3,7 @@ name = "loupe"
 version = "0.1.0"
 edition = "2021"
 rust-version = "1.65"
+license = "GPL-3.0-or-later"
 
 [dependencies]
 anyhow = "1.0.66"

deny.toml

@@ -0,0 +1,23 @@
+vulnerability = "deny"
+unmaintained = "deny"
+yanked = "deny"
+notice = "warn"
+
+# A list of advisory IDs to ignore. Note that ignored advisories will still
+# output a note when they are encountered.
+ignore = [
+    #"RUSTSEC-0000-0000",
+]
+
+# This section is considered when running `cargo deny check licenses`
+# More documentation for the licenses section can be found here:
+# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
+[licenses]
+copyleft = "allow"
+# Blanket approval or denial for OSI-approved or FSF Free/Libre licenses
+# * both - The license will be approved if it is both OSI-approved *AND* FSF
+# * either - The license will be approved if it is either OSI-approved *OR* FSF
+# * osi-only - The license will be approved if is OSI-approved *AND NOT* FSF
+# * fsf-only - The license will be approved if is FSF *AND NOT* OSI-approved
+# * neither - This predicate is ignored and the default lint level is used
+allow-osi-fsf-free = "either"