From db3ade30d4006896e3bf02be5dc8c06ee7655f5f Mon Sep 17 00:00:00 2001
From: "Lance R. Vick" <lance@lrvick.net>
Date: Mon, 27 Jul 2020 11:23:26 -0700
Subject: [PATCH] document use of 'audit' target when releasing

---
 README.md | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index fdf495b..dba97e2 100644
--- a/README.md
+++ b/README.md
@@ -85,13 +85,19 @@ internet with high integrity on the supply chain of the firmware and OS used.
 
 ## Release ##
 
-1. Verify then make detached signature of given release build with:
+1. Audit dependencies to ensure no relevant CVEs are open at the moment:
+
+    ```
+    make audit
+    ```
+
+2. Verify and add detached signature to given release with:
 
     ```
     make VERSION=1.0.0rc1 verify sign
     ```
 
-2. Commit signatures.
+3. Commit signatures.
 
 
 ## Development ##