AskaEth
a5d1dec495
CI / fmt (rustfmt --check) (push) Waiting to run
CI / clippy (ubuntu-latest) (push) Waiting to run
CI / clippy (windows-latest) (push) Waiting to run
CI / test (ubuntu-latest) (push) Waiting to run
CI / test (windows-latest) (push) Waiting to run
CI / build release (ubuntu-latest) (push) Waiting to run
CI / build release (windows-latest) (push) Waiting to run
CI / runtime smoke (ubuntu x64, xvfb) (push) Waiting to run
CI / runtime smoke (macos arm64, probe) (push) Skipped
CI / update-e2e (windows x64) (push) Waiting to run
GPU evidence / GPU 判据自测（不需 GPU；跳过 ≠ 已验证） (push) Waiting to run
GPU evidence / GPU 证据 — 探测可用产物与硬件适配器 (push) Waiting to run
Guards / core 零 UI 守门 (push) Waiting to run
Guards / presenter 零 UI 守门 (push) Waiting to run
Guards / design 零第三方依赖守门 (push) Waiting to run
Guards / unsafe 落点守门（集合必须恰好等于期望） (push) Waiting to run
Guards / 文件行数 ≤400 守门 (push) Waiting to run
Guards / 依赖许可与来源（cargo-deny） (push) Waiting to run
Release guard / 发布标记语义守门（push tag → 稳定版） (push) Waiting to run
Signing status（播报，不是门禁） / 判据自测（三行/退出码/变异重放/接线） (push) Waiting to run
Signing status（播报，不是门禁） / 签名就绪度（播报） (push) Waiting to run
Release / 选槽位（默认四个：Windows 两档 + Linux 两档） (push) Waiting to run
本批内容见 CHANGELOG.md 的 0.2.4 段。按 D41 用孤儿快照推 main，保留「公开史只有里程碑」的模型。
55 lines
2.0 KiB
TOML
55 lines
2.0 KiB
TOML
# cargo-deny 配置（D15：Apache-2.0 主干，GPL 依赖不得进主干）。
|
||
# CI 侧的安装与执行见 .github/workflows/guards.yml（licenses job）。
|
||
# 参考：https://embarkstudios.github.io/cargo-deny/ · 决策：DevDocs/PlanDoc/00-decision-log.md D15
|
||
|
||
[graph]
|
||
all-features = true
|
||
|
||
[advisories]
|
||
version = 2
|
||
yanked = "deny"
|
||
# 注意：cargo-deny 0.20 移除了 severity-threshold（见 PR #611），严重度改由
|
||
# [advisories] 的 ignore 清单 + 后续安全轮次单独把关；这里只做「yanked 依赖禁止」。
|
||
|
||
[licenses]
|
||
version = 2
|
||
# 白名单：Apache-2.0 / MIT / BSD / Zlib 系（用户要求）＋ 实际依赖树需要的宽松许可。
|
||
# GPL / AGPL / LGPL / SSPL 一律不在列 → 直接 fail，不进主干。
|
||
#
|
||
# 补充项及来源（均为宽松、与 Apache-2.0 兼容，不改变「拒绝 copyleft」的立场）：
|
||
# - BSL-1.0（Boost）：clipboard-win / error-code（winit/arboard 的 Windows 依赖）
|
||
# - Unlicense：ksni（Slint 系统托盘）
|
||
# - CDLA-Permissive-2.0：webpki-roots（Mozilla CA 根证书数据）
|
||
# - Unicode-3.0：unicode-ident；CC0-1.0 / MIT-0 / ISC：生态常见宽松项
|
||
confidence-threshold = 0.92
|
||
allow = [
|
||
"Apache-2.0",
|
||
"Apache-2.0 WITH LLVM-exception",
|
||
"MIT",
|
||
"MIT-0",
|
||
"BSD-2-Clause",
|
||
"BSD-3-Clause",
|
||
"Zlib",
|
||
"BSL-1.0",
|
||
"ISC",
|
||
"CC0-1.0",
|
||
"Unlicense",
|
||
"Unicode-3.0",
|
||
"CDLA-Permissive-2.0",
|
||
# Slint（D2）走 Royalty-Free 2.0 轨道：其 crates 的 SPDX 表达为
|
||
# "GPL-3.0-only OR LicenseRef-Slint-Royalty-free-2.0 OR LicenseRef-Slint-Software-3.0"，
|
||
# 允许多选一即通过；这里显式放行 RF 分支，GPL 分支仍是拒绝的。
|
||
# 主义务：关于页放 AboutSlint 部件（见 NOTICE 与 DevDocs/PlanDoc/01c-native-gui-options.md §8）。
|
||
"LicenseRef-Slint-Royalty-free-2.0",
|
||
]
|
||
|
||
[bans]
|
||
multiple-versions = "warn"
|
||
wildcards = "deny"
|
||
highlight = "all"
|
||
|
||
[sources]
|
||
unknown-registry = "deny"
|
||
unknown-git = "deny"
|
||
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|