Add cargo-deny to CI by adding to make test (googleforgames#340)

This adds `cargo-deny` to `make test`, which also makes sure it is run
in Cloud Build for continuous integration.

This found a couple of dependencies that need to be updated because of
security advisories. These will be updated in a separate PR.

Closes googleforgames#327

build/Makefile

@@ -48,6 +48,8 @@ version:
 
 # Run all tests
 test: ensure-build-image
+	docker run --rm $(common_rust_args) \
+     		--entrypoint=cargo $(BUILD_IMAGE_TAG) deny check
 	docker run --rm $(common_rust_args) \
  		--entrypoint=cargo $(BUILD_IMAGE_TAG) clippy --tests -- -D warnings
 	docker run --rm $(common_rust_args) \

build/README.md

@@ -50,6 +50,10 @@ To run our external documentation tests:
 
 `cargo +nightly test --doc`
 
+To test dependency licences and security advisories:
+
+`cargo deny check`
+
 ### Developing with Make + Docker 
 
 There are a few reasons you may want to use the [Make](https://www.gnu.org/software/make/)

build/build-image/Dockerfile

@@ -33,6 +33,7 @@ RUN set -eux && \
     rustup toolchain install nightly && \
     cargo install cross && \
     cargo install cargo-about && \
+    cargo install --locked cargo-deny && \
     rustup --version && \
     cargo --version && \
     rustc --version && \