Set up cargo-deny (#358)

* Setup cargo-deny

* Nicer job names

.github/workflows/ci.yml

@@ -39,3 +39,28 @@ jobs:
 
     - name: 🧪 Run Rust tests
       run: cargo test --verbose
+
+  cargo-deny:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        checks:
+          - 'security advisories'
+          - 'banned licenses and crates'
+
+    # Prevent sudden announcement of a new advisory from failing ci:
+    continue-on-error: ${{ matrix.checks == 'security advisories' }}
+
+    steps:
+    - uses: actions/checkout@v2
+
+    - uses: EmbarkStudios/cargo-deny-action@v1
+      if: matrix.checks == 'security advisories'
+      with:
+        command: check advisories
+
+    - uses: EmbarkStudios/cargo-deny-action@v1
+      if: matrix.checks == 'banned licenses and crates'
+      with:
+        command: check bans licenses sources