diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 7ef8277..e341739 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -7,6 +7,10 @@ updates:
       interval: "weekly"
     cooldown:
       default-days: 7
+    groups:
+      codeql:
+        patterns:
+          - "github/codeql-action*"
 
 # Until Dependabot provides Scala updates, they are are handed by the Scala Steward action.
 # https://github.com/target/data-validator/blob/master/.github/workflows/scala-steward.yaml