diff --git a/code-scanning/codeql.yml b/code-scanning/codeql.yml
index 8a5d2d9..8cdc69c 100644
--- a/code-scanning/codeql.yml
+++ b/code-scanning/codeql.yml
@@ -15,8 +15,7 @@ on:
   push:
     branches: [ $default-branch, $protected-branches ]
   pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [ $default-branch ]
+    branches: [ $default-branch, $protected-branches ]
   schedule:
     - cron: $cron-weekly