diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 2f433b4ed..456135c85 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -10,6 +10,7 @@ on:
       - "src/**"
       - "**/*.go"
       - "**/*.rs"
+      - "**/*.java"
       - "**/go.mod"
       - "**/go.sum"
       - "**/Cargo.toml"
@@ -21,6 +22,7 @@ on:
       - "src/**"
       - "**/*.go"
       - "**/*.rs"
+      - "**/*.java"
       - "**/go.mod"
       - "**/go.sum"
       - "**/Cargo.toml"
@@ -54,6 +56,10 @@ jobs:
             build-mode: autobuild
           - language: rust
             build-mode: none
+          # Java (CodeQL id java-kotlin) supports buildless extraction, so it
+          # runs build-mode none like rust: no Bazel/Maven build on PRs.
+          - language: java-kotlin
+            build-mode: none
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4