diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b69a0e2..ecc7f15 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -27,3 +27,11 @@ jobs:
     uses: outpost-os/pipeline-python/.github/workflows/lint.yml@v1
     with:
       python-version: '3.10'
+  codeql:
+    needs: [ ut ]
+    permissions:
+      security-events: write
+      packages: read
+      actions: read
+      contents: read
+    uses: outpost-os/pipeline-python/.github/workflows/codeql.yml@v1