diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 374da34..e91844f 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -16,7 +16,7 @@ flatpak@aarch64:
   allow_failure: true
   extends: ".flatpak@aarch64"
 
-rustfmt:
+cargo-fmt:
   image: "rust:slim"
   script:
     - rustup component add rustfmt
@@ -77,6 +77,13 @@ cargo-clippy:
         cargo clippy -- -D warnings
       END
 
+cargo-audit:
+  interruptible: true
+  image: rust
+  script:
+    - cargo install cargo-deny
+    - cargo deny check
+
 pages:
   stage: deploy
   tags:
diff --git a/Cargo.toml b/Cargo.toml
index 618fe90..d5f6d91 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -3,6 +3,7 @@ name = "loupe"
 version = "0.1.0"
 edition = "2021"
 rust-version = "1.65"
+license = "GPL-3.0-or-later"
 
 [dependencies]
 anyhow = "1.0.66"
diff --git a/deny.toml b/deny.toml
new file mode 100644
index 0000000..90d78ef
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,23 @@
+vulnerability = "deny"
+unmaintained = "deny"
+yanked = "deny"
+notice = "warn"
+
+# A list of advisory IDs to ignore. Note that ignored advisories will still
+# output a note when they are encountered.
+ignore = [
+    #"RUSTSEC-0000-0000",
+]
+
+# This section is considered when running `cargo deny check licenses`
+# More documentation for the licenses section can be found here:
+# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
+[licenses]
+copyleft = "allow"
+# Blanket approval or denial for OSI-approved or FSF Free/Libre licenses
+# * both - The license will be approved if it is both OSI-approved *AND* FSF
+# * either - The license will be approved if it is either OSI-approved *OR* FSF
+# * osi-only - The license will be approved if is OSI-approved *AND NOT* FSF
+# * fsf-only - The license will be approved if is FSF *AND NOT* OSI-approved
+# * neither - This predicate is ignored and the default lint level is used
+allow-osi-fsf-free = "either"