Right now, if bans.build.include-dependencies is enabled it will check all the dependencies the exact same as the crate itself, which while more complete just results in uninteresting noise due to things like CI/codegen scripts often being packaged into crates even though they are not relevant to dowstream users. There should be an option, defaulted off, to include scripts when checking dependencies, as really native executables are the more interesting thing to check.
Right now, if
bans.build.include-dependenciesis enabled it will check all the dependencies the exact same as the crate itself, which while more complete just results in uninteresting noise due to things like CI/codegen scripts often being packaged into crates even though they are not relevant to dowstream users. There should be an option, defaulted off, to include scripts when checking dependencies, as really native executables are the more interesting thing to check.