diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 581e58f..379c88d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -27,6 +27,10 @@ jobs:
         run: cargo build
       - name: Test
         run: cargo test
+      - name: Security audit
+        run: |
+          cargo install cargo-audit --locked --quiet
+          cargo audit
 
   build-release:
     name: Build (${{ matrix.target }})