Deny

ci: Run `cargo-deny` during ci #4

	name: Deny
	on:
	workflow_dispatch:
	pull_request:
	branches: ["main"]
	paths-ignore: [".md", ".png", ".svg", "LICENSE-"]
	merge_group:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref_name }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	deny:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	checks:
	- advisories
	- bans licenses sources

	# Prevent sudden announcement of a new advisory from failing ci:
	continue-on-error: ${{ matrix.checks == 'advisories' }}

	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- uses: EmbarkStudios/cargo-deny-action@e2f4ede4a4e60ea15ff31bc0647485d80c66cfba # v2.0.4
	with:
	command: check ${{ matrix.checks }}

Provide feedback