diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index d97981d5c20e..d7ee0a1b394b 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -8,12 +8,40 @@ on:
   push:
     branches:
       - master
+    paths:
+      - '**/*.c'
+      - '**/*.cc'
+      - '**/*.cpp'
+      - '**/*.cmake'
+      - '**/*.h'
+      - '**/*.hpp'
+      - '**/*.in'
+      - '**/*.inc'
+      - '**/*.ipp'
+      - '**/*.lds'
+      - '**/CMakeLists.txt'
+      - '!docs/**'
+      - '!.github/**'
+      - '!utils/**'
   pull_request:
     branches:
       - master
       - 'proposal/**'
-    paths-ignore:
-      - '**/*.md'
+    paths:
+      - '**/*.c'
+      - '**/*.cc'
+      - '**/*.cpp'
+      - '**/*.cmake'
+      - '**/*.h'
+      - '**/*.hpp'
+      - '**/*.in'
+      - '**/*.inc'
+      - '**/*.ipp'
+      - '**/*.lds'
+      - '**/CMakeLists.txt'
+      - '!docs/**'
+      - '!.github/**'
+      - '!utils/**'
   schedule:
     - cron: '15 18 * * 6'
 
@@ -38,9 +66,6 @@ jobs:
       fail-fast: false
       matrix:
         language: [ 'cpp' ]
-        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
-        # Learn more:
-        # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
 
     steps:
     - name: Checkout repository
@@ -51,10 +76,6 @@ jobs:
       uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-        # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
     - name: Build
       run: |