Files
openobserve/deny.toml
T
Huaijin ef3617f157 refactor: split HTTP APIs by domain (#13479)
## Summary

- organize API crates under
`src/api/{common,grpc,http,ingest,management,pipelines,search}`
- keep ingest, management, pipelines, and search independent from one
another; compose them only in the HTTP frontend
- move pattern APIs into search and simplify `main.rs` wiring
- update workspace manifests, lockfile, integration tests, and
cargo-deny entries
- keep `web/` unchanged

## Validation

- `cargo fmt --all -- --check`
- `cargo clippy --all-targets -- -D warnings`
- `cargo deny check licenses`
- enterprise overlay: `cargo build --no-default-features --features
enterprise`
- enterprise overlay: `cargo build --no-default-features --features
cloud`
- enterprise overlay: `cargo clippy --all-targets -- -D warnings`

The matching `o2-enterprise` overlay PR will be linked after creation.
2026-07-27 12:12:59 +00:00

108 lines
4.5 KiB
TOML
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Configuration documentation:
#  https://embarkstudios.github.io/cargo-deny/index.html
[advisories]
yanked = "deny"
git-fetch-with-cli = true
ignore = [
"RUSTSEC-2023-0071", # from rsa, transitive dep of sqlx
"RUSTSEC-2021-0139", # from ansi_term, transitive dep of vrl
"RUSTSEC-2024-0370", # we need it even it is no longer maintained
"RUSTSEC-2024-0384", # from instant, dep of parking_lot
"RUSTSEC-2024-0388", # from derivative, dep of vrl
"RUSTSEC-2024-0421", # from idna, transitive dep of vrl
"RUSTSEC-2024-0436", # from paste, transitive dep of datafusion
"RUSTSEC-2024-0437", # from protobuf, transitive dep of prometheus
]
[licenses]
private = { ignore = true }
exceptions = [
# We should probably NOT bundle CA certs but use the OS ones.
{ name = "webpki-roots", allow = ["MPL-2.0","CDLA-Permissive-2.0"] },
{ name = "webpki-root-certs", allow = ["CDLA-Permissive-2.0"] }, # transitive dep via rustls-platform-verifier
{ name = "openobserve", allow = ["AGPL-3.0"] },
{ name = "openobserve-api-common", allow = ["AGPL-3.0"] },
{ name = "openobserve-api-grpc", allow = ["AGPL-3.0"] },
{ name = "openobserve-api-http", allow = ["AGPL-3.0"] },
{ name = "openobserve-api-ingest", allow = ["AGPL-3.0"] },
{ name = "openobserve-api-management", allow = ["AGPL-3.0"] },
{ name = "openobserve-api-pipelines", allow = ["AGPL-3.0"] },
{ name = "openobserve-api-search", allow = ["AGPL-3.0"] },
{ name = "openobserve-builtins", allow = ["AGPL-3.0"] },
{ name = "common", allow = ["AGPL-3.0"] },
{ name = "openobserve-core", allow = ["AGPL-3.0"] },
{ name = "openobserve-node", allow = ["AGPL-3.0"] },
{ name = "openobserve-jobs", allow = ["AGPL-3.0"] },
{ name = "openobserve-mcp", allow = ["AGPL-3.0"] },
{ name = "openobserve-org-storage", allow = ["AGPL-3.0"] },
{ name = "openobserve-sourcemaps", allow = ["AGPL-3.0"] },
{ name = "openobserve-tls", allow = ["AGPL-3.0"] },
{ name = "transform", allow = ["AGPL-3.0"] },
{ name = "super_cluster_queue", allow = ["AGPL-3.0"] },
{ name = "search", allow = ["AGPL-3.0"] },
{ name = "openobserve-cipher", allow = ["AGPL-3.0"] },
{ name = "db", allow = ["AGPL-3.0"] },
{ name = "promql", allow = ["AGPL-3.0"] },
{ name = "audit", allow = ["AGPL-3.0"] },
{ name = "search_service", allow = ["AGPL-3.0"] },
{ name = "usage_reporting", allow = ["AGPL-3.0"] },
{ name = "vortex", allow = ["AGPL-3.0"] },
{ name = "vortex-datafusion", allow = ["AGPL-3.0"] },
{ name = "config", allow = ["AGPL-3.0"] },
{ name = "infra", allow = ["AGPL-3.0"] },
{ name = "ingester", allow = ["AGPL-3.0"] },
{ name = "wal", allow = ["AGPL-3.0"] },
{ name = "proto", allow = ["AGPL-3.0"] },
{ name = "flight", allow = ["AGPL-3.0"] },
{ name = "tantivy_utils", allow = ["AGPL-3.0"] },
{ name = "report_server", allow = ["AGPL-3.0"] },
{ name = "web", allow = ["AGPL-3.0"] },
{ name = "arrayref", allow = ["BSD-2-Clause"] },
{ name = "mach", allow = ["BSD-2-Clause"] },
{ name = "fastdivide", allow = ["zlib-acknowledgement"] },
{ name = "foldhash", allow = ["Zlib"] },
{ name = "adler32", allow = ["Zlib"] },
{ name = "libz-rs-sys", allow = ["Zlib"] },
{ name = "libz-rs", allow = ["Zlib"] },
{ name = "zlib-rs", allow = ["Zlib"] },
# These two are transitive deps of vrl via dep rustyline.
# However, rustyline is needed only when we enable feature cli
# which we haven't. Probably in Cargo.lock due to old code, need
# to take a look and remove.
{ name = "clipboard-win", allow = ["BSL-1.0"] },
{ name = "error-code", allow = ["BSL-1.0"] },
{ name = "base16", allow = ["CC0-1.0"] },
{ name = "tiny-keccak", allow = ["CC0-1.0"] },
{ name = "ring", allow = ["BSD-4-Clause", "OpenSSL"] },
{ name = "inferno", allow = ["CDDL-1.0"] },
{ name = "libbz2-rs-sys", allow = ["bzip2-1.0.6"] },
{ name = "aws-lc-sys", allow = ["OpenSSL"] },
{ name = "borrow-or-share", allow = ["MIT-0"] },
]
allow = [
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"MPL-2.0",
"MIT",
"BSD-3-Clause", # OSI + fsf free
"Unicode-3.0", # OSI
"ISC", # OSI + fsf free
"BSL-1.0",
"CC0-1.0",
"0BSD", # OSI approved - BSD Zero Clause License
]
[[licenses.clarify]]
name = "ring"
expression = "BSD-4-Clause AND ISC AND MIT AND OpenSSL"
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
[sources.allow-org]
github = ["openobserve", "apache"]
[sources]
allow-git = ["https://github.com/mattsse/chromiumoxide"]