diff --git a/bucket/codeql.json b/bucket/codeql.json
index 1fc10facd9..6aaa7c4dce 100644
--- a/bucket/codeql.json
+++ b/bucket/codeql.json
@@ -1,5 +1,5 @@
 {
-    "version": "2.20.6",
+    "version": "2.20.7",
     "description": "Source code security analyzer from GitHub",
     "homepage": "https://github.com/github/codeql-cli-binaries",
     "license": {
@@ -8,8 +8,8 @@
     },
     "architecture": {
         "64bit": {
-            "url": "https://github.com/github/codeql-cli-binaries/releases/download/v2.20.6/codeql-win64.zip",
-            "hash": "69655a03117605dc59db78e210d3857bbc5db4187e5402967986f65d251b1357",
+            "url": "https://github.com/github/codeql-cli-binaries/releases/download/v2.20.7/codeql-win64.zip",
+            "hash": "10fcb55f564ceb7152e6788b704ca3918f7575dc9fe1b291f61a2135fdbe9378",
             "extract_dir": "codeql"
         }
     },