diff --git a/.github/workflows/CodeQL.yml b/.github/workflows/CodeQL.yml
new file mode 100644
index 00000000..486d88d4
--- /dev/null
+++ b/.github/workflows/CodeQL.yml
@@ -0,0 +1,17 @@
+name: "CodeQL"
+on:
+  pull_request:
+    branches:
+      - "main"
+      - "release-*"
+concurrency:
+  group: "${{ github.workflow }}-${{ github.ref }}"
+  cancel-in-progress: "${{ startsWith(github.ref, 'refs/pull/') }}"
+permissions:
+  contents: "read"
+  security-events: "write"
+  actions: "read"
+jobs:
+  codeql:
+    name: "CodeQL"
+    uses: "ITensor/ITensorActions/.github/workflows/CodeQL.yml@v2"