agentskillexchange Gate Rust dependency trees on license, advisory, and source-policy violations before merge with cargo-deny
Use cargo-deny when an agent needs to enforce Rust dependency policy before merge by checking advisories, licenses, bans, and source rules in one repeatable gate instead of doing ad hoc manifest review.
Prerequisites
Rust toolchain, Cargo project, cargo-deny configuration file, and CI or local shell access.
Installation
Use the upstream install or setup path that matches your environment:
- cargo install --locked cargo-deny && cargo deny init && cargo deny check
- If you want to use cargo-deny without having cargo installed, build cargo-deny with the standalone feature. This can be useful in Docker Images.
- cargo install --locked cargo-deny
- cargo deny init
Basic usage or getting-started notes:
To run on CI as a GitHub Action, see cargo-deny-action.
Install cargo-deny
Extracted from upstream docs: https://raw.githubusercontent.com/EmbarkStudios/cargo-deny/HEAD/README.md