diff --git a/.deny.toml b/.deny.toml
index 6e33d329..28542f8f 100644
--- a/.deny.toml
+++ b/.deny.toml
@@ -18,7 +18,8 @@ build.include-archives = true
 build.allow-build-scripts = [
     { name = "proc-macro2" }, # via serde_derive
     { name = "semver" },
-    { name = "serde" },
+    { name = "serde_core" },
+    { name = "serde" }, # https://github.com/serde-rs/serde/issues/2972
 ]
 build.bypass = [
 ]
diff --git a/tools/manifest-schema/Cargo.toml b/tools/manifest-schema/Cargo.toml
index e7ba380d..7966aa64 100644
--- a/tools/manifest-schema/Cargo.toml
+++ b/tools/manifest-schema/Cargo.toml
@@ -18,7 +18,7 @@ targets = ["x86_64-unknown-linux-gnu"]
 # The following are external types that are allowed to be exposed in our public API.
 allowed_external_types = [
     "semver::*",
-    "serde::*",
+    "serde_core::*",
 ]
 
 [lib]