deny.toml

[licenses]
version = 2

# We want really high confidence when inferring licenses from text
confidence-threshold = 0.93

allow = [
    "Apache-2.0",
    #"BSD-2-Clause", # OK but currently unused; commenting to prevent warning
    "BSD-3-Clause",
    "BSL-1.0",
    #"CC0-1.0",  # OK but currently unused; commenting to prevent warning
    "ISC",
    "MIT",
    "OpenSSL",
    "Unicode-3.0",
    "Unlicense",
    "Zlib"
]

exceptions = [
    # Explicitly allows CDLA-Permissive-2.0 being pulled in through reqwest's and actix's rustls dependency chain (which uses webpki)
    { name = "webpki-roots", allow = ["CDLA-Permissive-2.0"], version = "*" },
]

[bans]
# Deny multiple versions or wildcard dependencies.
multiple-versions = "deny"
wildcards = "deny"

skip-tree = [
    # aws-smithy-client brings in several lagging dependencies that can be ignored
    # since it is only used in the integration tests
    { name = "integ" }
]

[sources]
# Deny crates from unknown registries or git repositories.
unknown-registry = "deny"
unknown-git = "deny"

[[licenses.clarify]]
name = "ring"
expression = "Apache-2.0 AND ISC AND MIT AND OpenSSL"
license-files = [
    { path = "LICENSE", hash = 0xd99693a },
    { path = "LICENSE-BoringSSL", hash = 0x8f795a3 },
    { path = "LICENSE-other-bits", hash = 0x8b770de2 },
    { path = "third_party/fiat/LICENSE", hash = 0x931a8dd4 },
    { path = "src/polyfill/once_cell/LICENSE-APACHE", hash = 0x24b54f4b },
    { path = "src/polyfill/once_cell/LICENSE-MIT", hash = 0x69371061 },
]

[[licenses.clarify]]
name = "webpki"
expression = "ISC"
license-files = [
    { path = "LICENSE", hash = 0x001c7e6c }
]

[[licenses.clarify]]
name = "rustls-webpki"
expression = "ISC"
license-files = [
    { path = "LICENSE", hash = 0x001c7e6c },
]