Run cargo-deny at build (experimental/proposal)

Cargo.toml

@@ -5,4 +5,5 @@ members = [
   "foreign-service",
   "test-logger",
   "test-web-console-mock",
+  "springql-build",
 ]

deny.toml

@@ -106,6 +106,9 @@ exceptions = [
     # Each entry is the crate and version constraint, and its specific allow
     # list
     #{ allow = ["Zlib"], name = "adler32", version = "*" },
+
+    # used on build-dependencies, no code to include in this repo
+    {allow=["CC0-1.0"] , name="dunce"}
 ]
 
 # Some crates don't have (easily) machine readable licensing information,

springql-build/Cargo.toml

@@ -0,0 +1,11 @@
+[package]
+name = "springql-build"
+version = "0.1.0"
+edition = "2021"
+license="MIT OR Apache-2.0"
+
+[dependencies]
+
+[build-dependencies]
+anyhow = "1.0.57"
+run_script = "0.9.0"

springql-build/build.rs

@@ -0,0 +1,29 @@
+use std::path::PathBuf;
+
+use anyhow::Result;
+use run_script::ScriptOptions;
+
+fn main() -> Result<()> {
+    let mut options = ScriptOptions::new();
+    options.working_directory = Some(PathBuf::from(std::env::var("CARGO_MANIFEST_DIR")?));
+    let args = vec![];
+    let (code, output, error) = run_script::run(
+        r#"
+         WORKSPACE_MANIFEST=$(cargo locate-project --workspace | jq -r '.root')
+         WORKSPACE_DIR=$(dirname ${WORKSPACE_MANIFEST})
+         cd ${WORKSPACE_DIR}
+         cargo deny check
+         "#,
+        &args,
+        &options,
+    )
+    .unwrap();
+    if code != 0 {
+        eprintln!("==== STDOUT: cargo deny check ");
+        eprintln!("{0}", output);
+        eprintln!("==== STDERR: cargo deny check ");
+        eprintln!("{0}", error);
+        panic!("`cargo deny check` failed code={0}", code);
+    }
+    Ok(())
+}

springql-build/src/lib.rs

@@ -0,0 +1 @@
+// this crate is a build script crate. dont have any lib code.

springql-core/Cargo.toml

@@ -59,3 +59,6 @@ regex = "1.5"
 float-cmp = "0.9"
 
 tempfile = "3.3"
+
+[build-dependencies]
+springql-build = {path = "../springql-build"}