From 5840db0f78572197b2e6efe73be390b361efd7c7 Mon Sep 17 00:00:00 2001
From: Matthew Fishman <mfishman@flatironinstitute.org>
Date: Wed, 9 Sep 2026 18:47:14 -0400
Subject: [PATCH] Add the CodeQL workflow to this release branch

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/CodeQL.yml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 .github/workflows/CodeQL.yml

diff --git a/.github/workflows/CodeQL.yml b/.github/workflows/CodeQL.yml
new file mode 100644
index 00000000..486d88d4
--- /dev/null
+++ b/.github/workflows/CodeQL.yml
@@ -0,0 +1,17 @@
+name: "CodeQL"
+on:
+  pull_request:
+    branches:
+      - "main"
+      - "release-*"
+concurrency:
+  group: "${{ github.workflow }}-${{ github.ref }}"
+  cancel-in-progress: "${{ startsWith(github.ref, 'refs/pull/') }}"
+permissions:
+  contents: "read"
+  security-events: "write"
+  actions: "read"
+jobs:
+  codeql:
+    name: "CodeQL"
+    uses: "ITensor/ITensorActions/.github/workflows/CodeQL.yml@v2"