diff --git a/.forgejo/workflows/audit.yml b/.forgejo/workflows/audit.yml
new file mode 100644
index 0000000..c81561f
--- /dev/null
+++ b/.forgejo/workflows/audit.yml
@@ -0,0 +1,26 @@
+name: "Audit dependencies"
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '.forgejo/workflows/audit.yml'
+      - '**/Cargo.toml'
+      - '**/Cargo.lock'
+      - '**/audit.toml'
+  schedule:
+    - cron: '10 23 * * 0'
+  workflow_dispatch:
+
+jobs:
+  audit:
+    runs-on: rust-latest
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Run cargo audit
+        run: cargo audit