diff --git a/.config/tsaoptions.json b/.config/tsaoptions.json
new file mode 100644
index 00000000..55c5a776
--- /dev/null
+++ b/.config/tsaoptions.json
@@ -0,0 +1,10 @@
+{
+    "instanceUrl": "https://devdiv.visualstudio.com/",
+    "template": "TFSDEVDIV",
+    "projectName": "DEVDIV",
+    "areaPath": "DevDiv\\VS Client - Runtime SDKs\\SkiaSharp",
+    "iterationPath": "DevDiv",
+    "notificationAliases": [ "runtimerepo-infra@microsoft.com" ],
+    "repositoryName": "SkiaSharp.Extended",
+    "codebaseName": "SkiaSharp.Extended"
+}
\ No newline at end of file
diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index c76ca63f..af001eed 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -29,6 +29,7 @@ variables:
   GIT_SHA: $(Build.SourceVersion)
   GIT_BRANCH_NAME: $(Build.SourceBranchName)
   Codeql.Enabled: true
+  Codeql.TSAEnabled: true
 
 resources:
   repositories: