Add cargo deny to check dependencies for license disagreements

TLDR: deny copyleft, deny unknown, allow only MIT, Apache-2.0 and BSD-3-Clause
kellerkindt · Mar 19, 2021 · b155557 · b155557
1 parent f24b8e7
commit b155557
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
@@ -186,4 +186,11 @@ jobs:
         uses: coverallsapp/github-action@master
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
-          path-to-lcov: './lcov.info'
+          path-to-lcov: './lcov.info'
+
+  cargo-deny:
+    name: Check license and vulnerabilities
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: EmbarkStudios/cargo-deny-action@v1