diff --git a/.github/codeql/config.yml b/.github/codeql/config.yml
new file mode 100644
index 00000000..ab510459
--- /dev/null
+++ b/.github/codeql/config.yml
@@ -0,0 +1,5 @@
+query-filters:
+  - exclude:
+      id: js/disabling-certificate-validation
+  - exclude:
+      id: js/missing-rate-limiting
diff --git a/.github/workflows/codeql_vulnerability_analysis.yml b/.github/workflows/codeql_vulnerability_analysis.yml
index 6c4a50ed..637e9683 100644
--- a/.github/workflows/codeql_vulnerability_analysis.yml
+++ b/.github/workflows/codeql_vulnerability_analysis.yml
@@ -1,4 +1,4 @@
-name: "CodeQL"
+name: "CodeQL analysis"
 
 on:
   pull_request:
@@ -22,12 +22,6 @@ jobs:
       contents: read
       security-events: write
 
-    query-filters:
-      - exclude:
-          id: js/disabling-certificate-validation
-      - exclude:
-          id: js/missing-rate-limiting
-
     strategy:
       fail-fast: false
     steps:
@@ -38,6 +32,8 @@ jobs:
       uses: github/codeql-action/init@v2
       with:
         languages: javascript
+        queries: +security-and-quality
+        config-file: ./.github/codeql/config.yml
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2