diff --git a/.github/workflows/code-ql.yml b/.github/workflows/code-ql.yml
index 5b678dd..38dd2ee 100644
--- a/.github/workflows/code-ql.yml
+++ b/.github/workflows/code-ql.yml
@@ -1,7 +1,10 @@
 name: CodeQL
 
 on:
+  push:
+    branches: [master]
   pull_request:
+    branches: [master]
   schedule:
     - cron: '0 5 * * 1'
   workflow_dispatch:
@@ -14,12 +17,16 @@ env:
   GUARD_CORE_JVM_REF: 77116062fc7d88dcb610b1f588e2bc78e63848ad
 
 jobs:
+  # One job for every language, so the required check context is exactly `code-ql` (a matrix would suffix it
+  # with the language).
   code-ql:
+    name: code-ql
     runs-on: ubuntu-latest
     permissions:
       actions: read
       contents: read
       security-events: write
+
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -43,7 +50,7 @@ jobs:
       - name: Initialize CodeQL
         uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
         with:
-          languages: kotlin
+          languages: kotlin,actions
 
       - name: Autobuild
         uses: github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0