diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000000..27522303db
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,31 @@
+name: "CodeQL"
+on:
+  push:
+    branches: [ main, codeql ]
+  pull_request:
+    branches: [ main, codeql ]
+  schedule:
+    # minute, hour, day of month, month, day of week
+    - cron: '0 0 * * 0'
+
+  jobs:
+    CodeQL-Build:
+      runs-on: ubuntu-latest
+
+      permissions:
+        security-events: write
+
+      steps:
+        - name: Checkout repository
+          uses: actions/checkout@v3
+
+        - name: Initialize CodeQL
+          uses: github/codeql-action/init@v1
+          with:
+            languages: go, cpp
+
+        - name: Autobuild
+          uses: github/codeql-action/autobuild@v1
+
+        - name: Perform CodeQL Analysis
+          uses: github/codeql-action/analyze@v1