CodeQL comes with a bunch of pre-configured queries for the language you're using (at least when running on Github enterprise)