Add OpenSSL related crates to deny.toml ban section

We use Rustls for TLS. We don't want to accidentally pull in
OpenSSL for anything. Both because it would bloat the binaries,
and because we would then potentially be vulnerable to OpenSSL
CVEs. Which is something we don't monitor since we are not actively
using it

1 files changed, 7 insertions, 1 deletions

diff --git a/deny.toml b/deny.toml
index ba4115822b..a75bd5ceab 100644
--- a/deny.toml
+++ b/deny.toml
@@ -76,7 +76,13 @@ wildcards = "warn"
 highlight = "all"
 
 allow = []
-deny = []
+deny = [
+    # We are using Rustls for TLS. We don't want to accidentally pull in
+    # anything OpenSSL related
+    { name = "openssl-sys" },
+    { name = "openssl-src" },
+    { name = "openssl-probe" },
+]
 skip = []
 skip-tree = []