diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 2ce50d03..cb2766d3 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -48,7 +48,6 @@ gem-audit:
   cache:
   - *cache-ruby
   before_script:
-  - "gem install bundler-audit"
   - *apk-add
   - *disable-hainish
   script:
diff --git a/Gemfile b/Gemfile
index f97c29ab..466ec079 100644
--- a/Gemfile
+++ b/Gemfile
@@ -117,6 +117,7 @@ end
 group :development do
   gem 'yard'
   gem 'brakeman'
+  gem 'bundler-audit'
   gem 'haml-lint', require: false
   gem 'letter_opener'
   gem 'listen'
diff --git a/Gemfile.lock b/Gemfile.lock
index 5be5a103..78563c84 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -106,6 +106,9 @@ GEM
       sassc-rails (>= 2.0.0)
     brakeman (5.4.1)
     builder (3.2.4)
+    bundler-audit (0.9.1)
+      bundler (>= 1.2.0, < 3)
+      thor (~> 1.0)
     capybara (2.18.0)
       addressable
       mini_mime (>= 0.1.3)
@@ -536,7 +539,7 @@ GEM
     temple (0.10.1)
     terminal-table (2.0.0)
       unicode-display_width (~> 1.1, >= 1.1.1)
-    thor (1.2.2)
+    thor (1.3.0)
     tilt (2.1.0)
     timecop (0.9.6)
     timeout (0.3.2)
@@ -586,6 +589,7 @@ DEPENDENCIES
   blazer
   bootstrap (~> 4)
   brakeman
+  bundler-audit
   capybara (~> 2.13)
   chartkick
   commonmarker