diff --git a/flake.nix b/flake.nix
index 38723ae..dbfaed7 100644
--- a/flake.nix
+++ b/flake.nix
@@ -103,6 +103,12 @@
               package = toolchain;
             };
             commitizen.enable = true;
+            cargo-audit = {
+              enable = true;
+              entry = "${pkgs.cargo-audit}/bin/cargo-audit audit";
+              files = "^Cargo\\.(toml|lock)$";
+              pass_filenames = false;
+            };
           };
         };