diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
new file mode 100644
index 0000000..f0c6928
--- /dev/null
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,24 @@
+name: CodeQL
+
+on:
+    push:
+        branches:
+            - main
+            - beta
+    pull_request:
+    schedule:
+        - cron: '0 0 * * 1' # 00:00 on Monday.
+
+permissions:
+    contents: read
+    security-events: write
+
+jobs:
+    CodeQL:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v6
+            - uses: github/codeql-action/init@v4
+              with:
+                  languages: javascript-typescript
+            - uses: github/codeql-action/analyze@v4