diff --git a/.github/workflows/build-lint-test.yml b/.github/workflows/build-lint-test.yml
index 6c96777d..277fea59 100644
--- a/.github/workflows/build-lint-test.yml
+++ b/.github/workflows/build-lint-test.yml
@@ -21,11 +21,13 @@ jobs:
                 cache: 'npm'
                 cache-dependency-path: '**/package-lock.json'
 
-
             - name: Install dependencies
               run: npm ci
               working-directory: xero-node
 
+            - name: Check for vulnerabilities
+              run: npm audit --exit-code
+
             - name: Run Build
               run: npm run build
               working-directory: xero-node