diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index cb8106955..aba205e36 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -22,4 +22,13 @@ updates:
       interval: "weekly"
     cooldown:
       default-days: 7
+    groups:
+      codeql:
+        applies-to: version-updates
+        patterns:
+          - "github/codeql-action/*"
+      codeql-security:
+        applies-to: security-updates
+        patterns:
+          - "github/codeql-action/*"
     open-pull-requests-limit: 20