chore(ci): check dependencies licenses with cargo-deny

Makefile

@@ -143,6 +143,18 @@ install_tarpaulin: install_rs_build_toolchain
 	cargo $(CARGO_RS_BUILD_TOOLCHAIN) install cargo-tarpaulin --locked || \
 	( echo "Unable to install cargo tarpaulin, unknown error." && exit 1 )
 
+.PHONY: install_cargo_deny # Install cargo-deny to check licenses
+install_cargo_deny: install_rs_build_toolchain
+	@cargo deny --version > /dev/null 2>&1 || \
+	cargo $(CARGO_RS_BUILD_TOOLCHAIN) install cargo-deny || \
+	( echo "Unable to install cargo deny, unknown error." && exit 1 )
+
+.PHONY: install_cargo_vet # Install cargo-vet to audit dependencies
+install_cargo_vet: install_rs_build_toolchain
+	@cargo vet --version > /dev/null 2>&1 || \
+	cargo $(CARGO_RS_BUILD_TOOLCHAIN) install cargo-vet || \
+	( echo "Unable to install cargo vet, unknown error." && exit 1 )
+
 .PHONY: install_tfhe_lints # Install custom tfhe-rs lints
 install_tfhe_lints:
 	(cd utils/cargo-tfhe-lints-inner && cargo install --path .) && \
@@ -296,6 +308,14 @@ check_newline: check_linelint_installed
 lint_workflow: check_actionlint_installed
 	actionlint
 
+.PHONY: check_licenses # Run cargo-deny to check dependencies licenses
+check_licenses: install_cargo_deny
+	cargo deny check licenses
+
+.PHONY: audit_deps # Run cargo-vet to audit dependencies
+audit_deps: install_cargo_vet
+	cargo vet
+
 .PHONY: clippy_core # Run clippy lints on core_crypto with and without experimental features
 clippy_core: install_rs_check_toolchain
 	RUSTFLAGS="$(RUSTFLAGS)" cargo "$(CARGO_RS_CHECK_TOOLCHAIN)" clippy \
@@ -1251,14 +1271,14 @@ sha256_bool: install_rs_check_toolchain
 	--features=$(TARGET_ARCH_FEATURE),boolean
 
 .PHONY: pcc # pcc stands for pre commit checks (except GPU)
-pcc: no_tfhe_typo no_dbg_log check_fmt check_typos lint_doc check_md_docs_are_tested check_intra_md_links \
+pcc: no_tfhe_typo no_dbg_log check_fmt check_typos check_licenses audit_deps lint_doc check_md_docs_are_tested check_intra_md_links \
 clippy_all tfhe_lints check_compile_tests
 
 .PHONY: pcc_gpu # pcc stands for pre commit checks for GPU compilation
 pcc_gpu: clippy_gpu clippy_cuda_backend check_compile_tests_benches_gpu check_rust_bindings_did_not_change
 
 .PHONY: fpcc # pcc stands for pre commit checks, the f stands for fast
-fpcc: no_tfhe_typo no_dbg_log check_fmt check_typos lint_doc check_md_docs_are_tested clippy_fast \
+fpcc: no_tfhe_typo no_dbg_log check_fmt check_typos audit_deps check_licenses lint_doc check_md_docs_are_tested clippy_fast \
 check_compile_tests
 
 .PHONY: conformance # Automatically fix problems that can be fixed

apps/trivium/Cargo.toml

@@ -2,6 +2,7 @@
 name = "tfhe-trivium"
 version = "0.1.0"
 edition = "2021"
+license = "BSD-3-Clause-Clear"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

deny.toml

@@ -0,0 +1,27 @@
+# This section is considered when running `cargo deny check licenses`
+# More documentation for the licenses section can be found here:
+# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
+[licenses]
+# List of explicitly allowed licenses
+# See https://spdx.org/licenses/ for list of possible licenses
+# [possible values: any SPDX 3.11 short identifier (+ optional exception)].
+allow = [
+    "MIT",
+    "BSD-3-Clause",
+    "ISC",
+    "Apache-2.0",
+    "Unicode-DFS-2016"
+]
+
+exceptions = [
+    { crate = "concrete-csprng", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "concrete-fft", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "concrete-ntt", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "tasks", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "tfhe", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "tfhe-cuda-backend", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "tfhe-trivium", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "tfhe-versionable", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "tfhe-versionable-derive", allow = ["BSD-3-Clause-Clear"] },
+    { crate = "tfhe-zk-pok", allow = ["BSD-3-Clause-Clear"] }
+]

supply-chain/audits.toml

@@ -0,0 +1,4 @@
+
+# cargo-vet audits file
+
+[audits]