diff --git a/deny.toml b/deny.toml
index 3928ac5c..a89d599d 100644
--- a/deny.toml
+++ b/deny.toml
@@ -23,9 +23,11 @@ allow = [
 ]
 
 [sources]
-required-git-spec="rev"
+unknown-git = "deny"
+required-git-spec = "rev"
 allow-git = [
     "https://github.com/ruma/ruma",
     "https://github.com/matrix-org/matrix-rust-sdk",
     "https://gitlab.gnome.org/GNOME/glycin",
 ]
+unused-allowed-source = "allow"