[DO NOT MERGE] CI: return cargo deny to PRs

[TriplEight]

This will be put to the pre-merge pipeline (and maybe removed from the master/release ones after it)
After this gets merged it's going to be required for the merge and the same will be done in Pokadot paritytech/polkadot#925
cc https://github.com/paritytech/opstooling/issues/47 https://github.com/paritytech/ci_cd/issues/102

[gilescope]

we are getting there...

[stale]

Hey, is anyone still working on this? Due to the inactivity this issue has been automatically marked as stale. It will be closed if no further activity occurs. Thank you for your contributions.

[gilescope]

not dead yet. Gradually jasonrpsee is getting ready for prime time. At that time I think we can re-enable. (unless we just have an exclusion list with a link to related issues).

[TriplEight]

Also, I anticipate that failing on vulnerabilities won't be a desirable thing, right?
Making them just warn is not the best, too. So at some point, we'll create a metric and a matrix alert, or an automatic github issue that would summarize the vulnerabilities.

[TriplEight]

as of now it still fails with a BlueOak license:

error[L001]: failed to satisfy license requirements
  ┌─ minicbor 0.8.0 (registry+https://github.com/rust-lang/crates.io-index):4:12
  │
4 │ license = "BlueOak-1.0.0"
  │            ^^^^^^^^^^^^^
  │            │
  │            license expression retrieved via Cargo.toml `license`
  │            rejected: not explicitly allowed

error[L003]: test-runner-example = 0.1.0 is unlicensed
  ┌─ test-runner-example 0.1.0 (path+file:///home/tripleight/code/github.com/paritytech/substrate/bin/node/test-runner-example):2:9
  │
2 │ name = "test-runner-example"
  │         ^^^^^^^^^^^^^^^^^^^ a valid license expression could not be retrieved for the crate
3 │ version = "0.1.0"
4 │ license = ""
  │            - license expression was not specified

error[L001]: failed to satisfy license requirements
  ┌─ minicbor-derive 0.6.2 (registry+https://github.com/rust-lang/crates.io-index):4:12
  │
4 │ license = "BlueOak-1.0.0"
  │            ^^^^^^^^^^^^^
  │            │
  │            license expression retrieved via Cargo.toml `license`
  │            rejected: not explicitly allowed

[stale]

Hey, is anyone still working on this? Due to the inactivity this issue has been automatically marked as stale. It will be closed if no further activity occurs. Thank you for your contributions.