diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a9e22e8bf..20b0773d0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -88,6 +88,7 @@ jobs:
             -DBUILD_TESTING=OFF \
             -DWITH_BENCHMARK=OFF \
             -DWITH_OTLP_GRPC=ON \
+            -DWITH_PROMETHEUS=ON \
             -DBUILD_SHARED_LIBS=ON \
             -DOPENTELEMETRY_INSTALL=ON
 
diff --git a/exporters/prometheus/CMakeLists.txt b/exporters/prometheus/CMakeLists.txt
index 9bd114e41..ef423923f 100644
--- a/exporters/prometheus/CMakeLists.txt
+++ b/exporters/prometheus/CMakeLists.txt
@@ -32,7 +32,8 @@ include(FetchContent)
 find_package(prometheus-cpp CONFIG QUIET)
 set(prometheus-cpp_PROVIDER "find_package")
 
-if(NOT prometheus-cpp_FOUND)
+if(NOT TARGET prometheus-cpp::core OR
+   NOT TARGET prometheus-cpp::push)
   FetchContent_Declare(
     prometheus-cpp
     GIT_REPOSITORY https://github.com/jupp0r/prometheus-cpp.git
diff --git a/exporters/prometheus/codeql-config.yml b/exporters/prometheus/codeql-config.yml
new file mode 100644
index 000000000..7ba917b59
--- /dev/null
+++ b/exporters/prometheus/codeql-config.yml
@@ -0,0 +1,7 @@
+name: "CodeQL config"
+
+paths-ignore:
+  - .cmake-build
+  - third_party
+  - _deps
+  - build