diff --git a/.github/workflows/CodeQL.yml b/.github/workflows/CodeQL.yml
new file mode 100644
index 0000000..d2fcb68
--- /dev/null
+++ b/.github/workflows/CodeQL.yml
@@ -0,0 +1,13 @@
+name: "CodeQL"
+on:
+  pull_request:
+    branches:
+      - "main"
+permissions:
+  contents: "read"
+  security-events: "write"
+  actions: "read"
+jobs:
+  codeql:
+    name: "CodeQL"
+    uses: "ITensor/ITensorActions/.github/workflows/CodeQL.yml@v2"
diff --git a/Project.toml b/Project.toml
index 55b08f4..103abfd 100644
--- a/Project.toml
+++ b/Project.toml
@@ -1,6 +1,6 @@
 name = "ITensorPkgSkeleton"
 uuid = "3d388ab1-018a-49f4-ae50-18094d5f71ea"
-version = "0.3.59"
+version = "0.3.60"
 authors = ["ITensor developers <support@itensor.org> and contributors"]
 
 [workspace]
diff --git a/template/.github/workflows/CodeQL.yml.template b/template/.github/workflows/CodeQL.yml.template
new file mode 100644
index 0000000..d2fcb68
--- /dev/null
+++ b/template/.github/workflows/CodeQL.yml.template
@@ -0,0 +1,13 @@
+name: "CodeQL"
+on:
+  pull_request:
+    branches:
+      - "main"
+permissions:
+  contents: "read"
+  security-events: "write"
+  actions: "read"
+jobs:
+  codeql:
+    name: "CodeQL"
+    uses: "ITensor/ITensorActions/.github/workflows/CodeQL.yml@v2"