summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorLinus Färnstrand <linus@mullvad.net>2024-03-08 15:19:42 +0100
committerLinus Färnstrand <linus@mullvad.net>2024-03-08 15:19:42 +0100
commitc42732bc5ea321c08f93fc9966587f3937c84026 (patch)
treecccb481e592399688a5d96f7e2d91e4ebdde4582
parentc1254500320ae49e0d167e7e9e061f121b2b79a5 (diff)
parentc26deb1134394bab9962e3bb4daee79a70469335 (diff)
downloadmullvadvpn-c42732bc5ea321c08f93fc9966587f3937c84026.tar.xz
mullvadvpn-c42732bc5ea321c08f93fc9966587f3937c84026.zip
Merge branch 'deny-nix-git-repo'
-rw-r--r--.github/workflows/verify-locked-down-signatures.yml1
-rw-r--r--deny.toml6
2 files changed, 5 insertions, 2 deletions
diff --git a/.github/workflows/verify-locked-down-signatures.yml b/.github/workflows/verify-locked-down-signatures.yml
index 925e6e6c6f..37748b6f2c 100644
--- a/.github/workflows/verify-locked-down-signatures.yml
+++ b/.github/workflows/verify-locked-down-signatures.yml
@@ -5,6 +5,7 @@ on:
paths:
- .github/workflows/verify-locked-down-signatures.yml
- Cargo.lock
+ - deny.toml
- gui/package-lock.json
- wireguard/libwg/go.sum
- ci/keys/**
diff --git a/deny.toml b/deny.toml
index 92267c9e52..670878ac4d 100644
--- a/deny.toml
+++ b/deny.toml
@@ -103,8 +103,10 @@ skip-tree = []
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
-# TODO: The PF socket type isn't released yet
-allow-git = ["https://github.com/nix-rust/nix"]
+# If we need to temporarily depend on a git repository in our Rust dependency tree,
+# it has to be added here. We should try to keep this list minimal. Having git
+# dependencies is not recommended.
+allow-git = []
[sources.allow-org]
# 1 or more github.com organizations to allow git sources for