diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index 8f198fa77..d0452d53b 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -90,6 +90,9 @@ variables:
              /p:PostBuildSign=$(PostBuildSign)
     - name: _PublishArgs
       value: ''
+  - ${{ if ne(variables['System.TeamProject'], 'public') }}:
+    - name: Codeql.Enabled
+      value: true​
 
 stages:
 - stage: build