diff --git a/.deny.toml b/.deny.toml
index 02b0e306b20..5613b6ac26f 100644
--- a/.deny.toml
+++ b/.deny.toml
@@ -1,3 +1,14 @@
+[bans]
+multiple-versions = "deny"
+skip-tree = [
+	{ name = "cts_runner" },
+	{ name = "dummy" },
+	{ name = "player" },
+	{ name = "run-wasm" },
+	{ name = "wgpu-info" },
+]
+wildcards = "deny"
+
 [licenses]
 allow = [
 	"Apache-2.0",