diff --git a/scripts/README.md b/scripts/README.md
index d8fdf0360..6b2baac37 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -8,6 +8,8 @@ and an own build machine.
 
 - `clippy.sh` runs `cargo clippy` for all Rust code in the project.
 
+- `deny.sh` runs `cargo deny` for all Rust code in the project.
+
 - `../.github/workflows` contains jobs run by GitHub Actions.
 
 - `remote_tests_python.sh` rsyncs to a build machine and runs
diff --git a/scripts/deny.sh b/scripts/deny.sh
new file mode 100755
index 000000000..1b6c9ac0b
--- /dev/null
+++ b/scripts/deny.sh
@@ -0,0 +1,2 @@
+#!/bin/sh
+cargo deny --workspace --all-features check -D warnings