diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index 8203c11d..242d33cd 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -13,6 +13,8 @@ variables:
     value: Release
   - name: DisableDockerDetector
     value: true
+  - name: CodeQL.Enabled
+    value: true
 
     # used for post-build phases, internal builds only
   - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}: