diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ce25265..1640187 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -21,4 +21,8 @@ updates:
       day: "saturday"
       time: "06:00"
       timezone: "America/New_York"
+    groups:
+      codeql:
+        patterns:
+          - "github/codeql-action*"
     open-pull-requests-limit: 20