diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml
deleted file mode 100644
index f85484ca2..000000000
--- a/.github/workflows/deny.yml
+++ /dev/null
@@ -1,27 +0,0 @@
-# Runs `cargo-deny` when modifying `Cargo.lock`.
-
-name: deny
-
-on:
-  push:
-    branches: [main]
-    paths: [Cargo.lock]
-  pull_request:
-    branches: [main]
-    paths: [Cargo.lock]
-  merge_group:
-
-env:
-  CARGO_TERM_COLOR: always
-
-concurrency: deny-${{ github.head_ref || github.run_id }}
-
-jobs:
-  deny:
-    name: deny
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: EmbarkStudios/cargo-deny-action@v2
-        with:
-          command: check all
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 61ba54e95..418fd4cc4 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -251,6 +251,9 @@ jobs:
           zepter --version
           time zepter run check
 
+  deny:
+    uses: ithacaxyz/ci/.github/workflows/deny.yml@main
+
   lint-success:
     name: lint success
     runs-on: ubuntu-latest
@@ -269,6 +272,7 @@ jobs:
       - no-test-deps
       - features
       - feature-propagation
+      - deny
     timeout-minutes: 30
     steps:
       - name: Decide whether the needed jobs succeeded or failed