diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index fac254d..253a583 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -12,6 +12,10 @@ updates:
       prefix: chore
     cooldown:
       default-days: 7
+    groups:
+      codeql:
+        patterns:
+          - 'github/codeql-action/*'
     open-pull-requests-limit: 10
   - package-ecosystem: npm
     directory: '/'