diff --git a/.github/workflows/psalm.yml b/.github/workflows/psalm.yml
index 452186eeac..e8737bea88 100644
--- a/.github/workflows/psalm.yml
+++ b/.github/workflows/psalm.yml
@@ -52,6 +52,9 @@ jobs:
           composer remove nextcloud/ocp --dev
           composer i
 
+      - name: Check for vulnerable PHP dependencies
+        run: composer require --dev roave/security-advisories:dev-latest
+
       - name: Install nextcloud/ocp
         run: composer require --dev nextcloud/ocp:dev-${{ steps.versions.outputs.branches-max }} --ignore-platform-reqs --with-dependencies