Rust + Cargo in a corporate environment


I’m curious to know how folks are using Rust and Cargo inside a corporate setting (i.e. you can’t just pull any random crate from or github). Or alternatively, if Cargo is not used in those scenarios, how do you manage dependencies and use external crates?