diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml
index 9dd4518..de81a8b 100644
--- a/.github/workflows/build-publish.yml
+++ b/.github/workflows/build-publish.yml
@@ -27,6 +27,10 @@ jobs:
           cache: gradle
       - name: test and build
         run: ./build.sh
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
+        with:
+         languages: java-kotlin
       - name: prepare release
         run: ./prepare-release.sh
         env: