diff --git a/deny.toml b/deny.toml
new file mode 100644
index 0000000..762a700
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,14 @@
+[licenses]
+copyleft = "allow"
+allow-osi-fsf-free = "both"
+allow = [
+	"OpenSSL",
+	"Unicode-DFS-2016",
+]
+
+[[licenses.clarify]]
+name = "ring"
+expression = "MIT AND ISC AND OpenSSL"
+license-files = [
+	{ path = "LICENSE", hash = 0xbd0eed23 }
+]