This is no longer necessary now that this feature is enabled by default.
security-experimental
codeql-config.yml
package.json