diff --git a/.vsts-ci.yml b/.vsts-ci.yml
index 7eca85c35..2a9e08d43 100644
--- a/.vsts-ci.yml
+++ b/.vsts-ci.yml
@@ -15,6 +15,8 @@ variables:
 - name: PostBuildSign
   value: true
 - ${{ if and(ne(variables['System.TeamProject'], 'public'), notin(variables['Build.Reason'], 'PullRequest')) }}:
+  - name: Codeql.Enabled
+    value: true
   - group: DotNet-DotNetCli-Storage
   - group: DotNet-Installer-SDLValidation-Params
   - name: _PublishUsingPipelines