diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4ec5117..6b9ca8c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,8 +1,12 @@
 name: CI
 
 on:
-  push: { branches: ["**"] }
-  pull_request: { branches: ["**"] }
+  push:
+    branches:
+      - master
+    tags:
+      - "*"
+  pull_request:
 
 jobs:
   ci:
diff --git a/.github/workflows/sec.yml b/.github/workflows/sec.yml
new file mode 100644
index 0000000..2694647
--- /dev/null
+++ b/.github/workflows/sec.yml
@@ -0,0 +1,31 @@
+name: Security
+
+on:
+  push:
+    branches:
+      - master
+    tags:
+      - "*"
+  pull_request:
+
+jobs:
+  cargo-deny:
+    name: Cargo Deny
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install cargo-deny (fast)
+        uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-deny
+
+      - name: Cache advisory DB
+        uses: actions/cache@v4
+        with:
+          path: ~/.cargo/advisory-db
+          key: advisory-db-v1
+
+      - name: Run cargo-deny
+        run: cargo deny check licenses bans advisories sources
diff --git a/LICENSE b/LICENSE-MIT
similarity index 99%
rename from LICENSE
rename to LICENSE-MIT
index 7af0f86..9ff5474 100644
--- a/LICENSE
+++ b/LICENSE-MIT
@@ -1,7 +1,5 @@
 Copyright (c) 2015 Manuel Alonso
 
-
-
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
@@ -9,13 +7,9 @@ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 
-
-
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 
-
-
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
diff --git a/README.md b/README.md
index 2a22937..d6529c7 100644
--- a/README.md
+++ b/README.md
@@ -67,9 +67,8 @@ See the full example [here](https://github.com/manute/rawsql/tree/master/example
 
 ## License
 
-Copyright © 2015 Manuel Alonso
-
-MIT License
+Licensed under:
+    - MIT license ([LICENSE-MIT](LICENSE-MIT) or <http://opensource.org/licenses/MIT>)
 
 ### Why not execute SQL this lib?
 In rust there is not yet a general driver like *JDBC* or go's *database/sql* so I decide to abstract first the parser of sql files to use directly with the libs already exists for each DB.
diff --git a/deny.toml b/deny.toml
new file mode 100644
index 0000000..d54bf37
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,26 @@
+# deny.toml
+[licenses]
+# We want really high confidence when inferring licenses from text
+confidence-threshold = 0.93
+allow = [
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "MIT",
+    "BSD-3-Clause",
+    "ISC",
+    "Unicode-3.0",
+    "Zlib",
+]
+exceptions = [
+    # Use exceptions for these as they only have a single user
+    { allow = ["CDLA-Permissive-2.0"], crate = "webpki-roots" },
+]
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"
+
+[advisories]
+unmaintained = "workspace"
+ignore = [
+]