Add auditing to CI based on cargo-deny

.github/workflows/rust.yml

@@ -71,3 +71,9 @@ jobs:
         with:
           name: code-coverage-report
           path: cobertura.xml
+
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v1
+    - uses: EmbarkStudios/cargo-deny-action@v0

deny.toml

@@ -0,0 +1,10 @@
+[licenses]
+allow-osi-fsf-free = "either"
+copyleft = "warn"
+exceptions = [{ allow = ["ISC", "MIT", "OpenSSL"], name = "ring" }]
+private = { ignore = true }
+
+[[licenses.clarify]]
+name = "ring"
+expression = "ISC AND MIT AND OpenSSL"
+license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]

interop/Cargo.toml

@@ -4,6 +4,7 @@ version = "0.1.0"
 authors = ["Benjamin Saunders <[email protected]>", "Jean-Christophe BEGUE <[email protected]>"]
 edition = "2018"
 default-run = "main"
+publish = false
 
 [dependencies]
 anyhow = "1.0.22"