diff --git a/deny.toml b/deny.toml
index 996ae7e5..c9c96eb2 100644
--- a/deny.toml
+++ b/deny.toml
@@ -18,5 +18,9 @@ allow = [
 	"ISC",
 	"0BSD",
 	"Zlib",
+	# Temporary additions to unblock CI while we pursue upgrades/replacements
+	# These MUST be timeboxed and reviewed per PR checklist
+	"MPL-2.0",
+	"CDLA-Permissive-2.0",
 ]
 exceptions = []