diff --git a/.github/workflows/psalm.yml b/.github/workflows/psalm.yml
index 8f7da955..f15dd859 100644
--- a/.github/workflows/psalm.yml
+++ b/.github/workflows/psalm.yml
@@ -54,3 +54,9 @@ jobs:
           cd php
           composer install
           composer run psalm
+
+
+      - name: Check for vulnerable PHP dependencies
+        run: |
+          composer require --dev roave/security-advisories:dev-latest
+          composer update --dry-run roave/security-advisories