diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml
new file mode 100644
index 000000000..db5c8e9bb
--- /dev/null
+++ b/.github/workflows/cargo-audit.yml
@@ -0,0 +1,35 @@
+name: Cargo Audit
+
+on:
+  workflow_dispatch:
+
+env:
+  HUSKY: 0
+
+jobs:
+  audit:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: windows-latest
+            target: x86_64-pc-windows-msvc
+          - os: macos-latest
+            target: aarch64-apple-darwin
+          - os: ubuntu-22.04
+            target: x86_64-unknown-linux-gnu
+
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v6
+
+      - name: Install Rust Stable
+        uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: stable
+
+      - name: Run Cargo Audit
+        uses: rustsec/audit-check@v2
+        with:
+          token: ${{ secrets.WORKFLOW_AUDIT_TOKEN }}
diff --git a/biome.json b/biome.json
index 422b2b297..d5a436f9d 100644
--- a/biome.json
+++ b/biome.json
@@ -40,7 +40,7 @@
       "!Changelog.md",
       "!CONTRIBUTING.md",
       "!.changelog_backups",
-      "!.github/workflows/*.lock.yml",
+      "!.github",
       "!.pnpm-lock.yaml"
     ]
   }