diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml
new file mode 100644
index 00000000..d0469f1c
--- /dev/null
+++ b/.github/workflows/codeql-analysis.yaml
@@ -0,0 +1,71 @@
+name: "CodeQL"
+
+on:
+  push:
+    paths:
+      - "android/**"
+      - "helper/**"
+  pull_request:
+    paths:
+      - "android/**"
+      - "helper/**"
+  schedule:
+    - cron: '0 11 * * 3'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'python', 'kotlin' ]
+
+    steps:
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: ${{ matrix.language }}
+          setup-python-dependencies: false
+
+      - name: set up JDK 11
+        uses: actions/setup-java@v3
+        with:
+          distribution: 'zulu'
+          java-version: '11'
+
+      - name: Install Flutter
+        uses: subosito/flutter-action@v2
+        with:
+          channel: 'stable'
+          flutter-version: '3.7.0'
+      - run: |
+          flutter config
+          flutter --version
+
+      - uses: actions/checkout@v3
+        with:
+          path: 'app'
+
+      - if: matrix.language == 'kotlin'
+        name: Build the App
+        run: android/scripts/build.sh
+        env:
+          YUBIOATH_STORE_BASE64: ${{ secrets.YUBIOATH_STORE_BASE64 }}
+          YUBIOATH_KEY_ALIAS: ${{ secrets.YUBIOATH_KEY_ALIAS }}
+          YUBIOATH_KEY_PASSWORD: ${{ secrets.YUBIOATH_KEY_PASSWORD }}
+          YUBIOATH_STORE_PASSWORD: ${{ secrets.YUBIOATH_STORE_PASSWORD }}
+        working-directory: ./app
+
+
+      - if: matrix.language == 'python'
+        name: autobuild
+        uses: github/codeql-action/autobuild@v2
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2