diff --git a/deny.toml b/deny.toml
index cbecdb902..464b11ebc 100644
--- a/deny.toml
+++ b/deny.toml
@@ -145,6 +145,10 @@ allow = [
     # CDLA-Permissive-2.0 is a permissive data license used by `webpki-roots`
     # for the Mozilla CA root bundle. Data-only, distribution-compatible.
     "CDLA-Permissive-2.0",
+    # CDDL-1.0 (copyleft) is pulled in only as a dev/profiling dependency via
+    # `inferno` -> `pprof` -> `lance-testing`; it is not distributed.
+    # PENDING LEGAL REVIEW before merge.
+    "CDDL-1.0",
 ]
 confidence-threshold = 0.8
 # Crates whose license cannot be determined from Cargo metadata but whose