diff --git a/.github/workflows/contracts/chainloop-vault-codeql.yml b/.github/workflows/contracts/chainloop-vault-codeql.yml
index 77afba814..e3f58fd22 100644
--- a/.github/workflows/contracts/chainloop-vault-codeql.yml
+++ b/.github/workflows/contracts/chainloop-vault-codeql.yml
@@ -21,4 +21,5 @@ spec:
   policyGroups:
     - ref: slsa-checks
       with:
-        runner: GITHUB_ACTION
\ No newline at end of file
+        runner: GITHUB_ACTION
+    - ref: sast