diff --git a/.github/workflows/CodeQL.yml b/.github/workflows/CodeQL.yml
new file mode 100644
index 0000000..d2fcb68
--- /dev/null
+++ b/.github/workflows/CodeQL.yml
@@ -0,0 +1,13 @@
+name: "CodeQL"
+on:
+  pull_request:
+    branches:
+      - "main"
+permissions:
+  contents: "read"
+  security-events: "write"
+  actions: "read"
+jobs:
+  codeql:
+    name: "CodeQL"
+    uses: "ITensor/ITensorActions/.github/workflows/CodeQL.yml@v2"