ok...

.cargo/deny.toml

@@ -0,0 +1,2 @@
+[bans]
+deny = [{ name = "openssl" }]

.github/workflows/test.yml

@@ -22,6 +22,9 @@ jobs:
     if: github.event_name == 'pull_request'
     steps:
       - uses: actions/checkout@v4
-      - uses: EmbarkStudios/cargo-deny-action@v1
-        with:
-          manifest-path: test/Cargo.toml
+      - name: Extract branch name
+        run: echo "branch=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_OUTPUT
+        id: extract_branch
+      - uses: EmbarkStudios/cargo-deny-action@${{ steps.extract_branch.outputs.branch }}
+        # with:
+        #   manifest-path: test/Cargo.toml

Cargo.toml

@@ -0,0 +1,6 @@
+[package]
+name = "root"
+version = "0.1.0"
+
+[dependencies]
+openssl = "0.10"

action.yml

@@ -22,7 +22,7 @@ inputs:
   manifest-path:
     description: "Repo root relative path to the Cargo manifest to check"
     required: false
-    default: "Cargo.toml"
+    default: "./Cargo.toml"
   log-level:
     description: "The log level for cargo-deny"
     required: false

src/main.rs

@@ -0,0 +1 @@
+fn main() {}