diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d7dc65db..f3f9d19a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,6 +6,10 @@ updates:
     labels: ["no changelog", "merge when ready", "dependencies", "github_actions"]
     schedule:
       interval: weekly
+    groups:
+      codeql:
+        patterns:
+          - "github/codeql-action*"
 
   - package-ecosystem: gomod
     directory: /