diff --git a/.github/workflows/benchmarks.yaml b/.github/workflows/benchmarks.yaml
index 7a222fd8..c794330d 100644
--- a/.github/workflows/benchmarks.yaml
+++ b/.github/workflows/benchmarks.yaml
@@ -49,6 +49,7 @@ jobs:
         working-directory: ./pr
         run: |
           uv sync --group test
+          uv audit --locked
           uv run pytest --benchmark-only --benchmark-save=pr
 
       - name: Run benchmarks on main
@@ -56,6 +57,7 @@ jobs:
         continue-on-error: true
         run: |
           uv sync --group test
+          uv audit --locked
           uv run pytest --benchmark-only --benchmark-save=base
 
       - name: Compare results
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index e31037d9..d9a11fb1 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -41,6 +41,9 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v4
 
+      - name: Audit dependencies
+        run: uv audit --locked
+
       - name: Set package version
         run: |
           VERSION=$(uvx dunamai from git --style semver)
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 93e7dc3f..50bc9f41 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -48,6 +48,9 @@ jobs:
           VERSION=$(uv run hatch version)
           echo "version=$VERSION" >> $GITHUB_OUTPUT
 
+      - name: Audit dependencies
+        run: uv audit --locked
+
       - name: Set git credentials
         run: |
           git config --global user.name "${{ github.actor }}"
diff --git a/.github/workflows/lint-test.yaml b/.github/workflows/lint-test.yaml
index ea9291bc..08dd229b 100644
--- a/.github/workflows/lint-test.yaml
+++ b/.github/workflows/lint-test.yaml
@@ -38,6 +38,9 @@ jobs:
       - name: Install project
         run: uv sync --group test --group docs
 
+      - name: Audit dependencies
+        run: uv audit --locked
+
       - name: Check uv lockfile
         run: uv lock --check
         if: always()
diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml
index 95d9fb46..9b900215 100644
--- a/.github/workflows/pypi.yaml
+++ b/.github/workflows/pypi.yaml
@@ -39,6 +39,9 @@ jobs:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
 
+      - name: Audit dependencies
+        run: uv audit --locked
+
       - name: Build wheel
         id: wheel
         run: |