content: [graph]
  # We only check dependencies against these platforms.
  targets = [
      { triple = "x86_64-apple-darwin" },
      { triple = "x86_64-unknown-linux-musl" },
  ]
  
  [advisories]
  ignore = [
      { id = "RUSTSEC-2024-0384", reason = "caused by kube, which hasn't updated their dependencies yet" },
      { id = "RUSTSEC-2025-0012", reason = "caused by kube, which hasn't updated their dependencies yet" },
  ]
  
  [licenses]
  # We  want to set a high confidence threshold for license detection.
  confidence-threshold = 1.0
  # Licenses that are allowed to be used in crates.
  allow = [
      # Permissive licenses
      "Apache-2.0",
      "BSD-2-Clause",
      "BSD-3-Clause",
      "ISC",
      "MIT",
      "OpenSSL",
      "Unicode-3.0",
      # Weak copyleft licenses
      "MPL-2.0",
  ]
  
  [[licenses.clarify]]
  name = "ring"
  # SPDX considers OpenSSL to encompass both the OpenSSL and SSLeay licenses
  # https://spdx.org/licenses/OpenSSL.html
  # ISC - Both BoringSSL and ring use this for their new files
  # MIT - "Files in third_party/ have their own licenses, as described therein. The MIT
  # license, for third_party/fiat, which, unlike other third_party directories, is
  # compiled into non-test libraries, is included below."
  # OpenSSL - Obviously
  expression    = "MIT"
  license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
  
  [sources]
  unknown-git      = "deny"
  unknown-registry = "deny"
  