diff --git a/renovate.json b/renovate.json
index 6a6947dd93..7b1b02a378 100644
--- a/renovate.json
+++ b/renovate.json
@@ -6,6 +6,16 @@
   ],
   "semanticCommitType": "ci",
   "packageRules": [
+    {
+      "matchManagers": [
+        "github-actions"
+      ],
+      "commitMessagePrefix": "GHA: ",
+      "labels": [
+        "CI"
+      ],
+      "enabled": false
+    },
     {
       "matchUpdateTypes": [
         "pin",
@@ -38,6 +48,7 @@
     {
       "description": "Schedule package updates on the 10th of each month",
       "matchPackageNames": [
+        "/codeql/i",
         "/ruff/i"
       ],
       "groupName": "monthly updates by name",