Bug: unused-workspace-dependencies false positives for any git dependency

[jaskij]

Describe the bug

For all my git dependencies, even if they are used under dependencies in multiple crates in the workspace, unused-workspace-dependencies

To reproduce

1. workspace
2. git dependency in the workspace
3. a number of crates in the workspace
4. those crates inheriting the workspace dependency
5. cargo deny check

cargo-deny version

0.15.0

What OS were you running cargo-deny on?

Linux

Additional context

No response

[Jake-Shadle]

I'll need a repro, git dependencies are tested for, but maybe there is something I missed with source matching.

[jaskij]

@Jake-Shadle here: https://github.com/jaskij/workspace-deps-repro

[jaskij]

Actually using the dependency in the crate shouldn't matter, right? As long as it's present in the workspace and inherited by the crate.

[Jake-Shadle]

cargo-deny never looks at source code.

[jaskij]

One thing I have noticed, which may or may not matter: some workspaces, but neither mine nor serde's, have a top-level package.

[Jake-Shadle]

Thanks for the report and repro, fixed in 0.15.1

[jaskij]

Thanks for the quick fix.

Also, since I don't think I said this earlier, thanks for the feature!