diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
new file mode 100644
index 0000000000..0f2a92b6c7
--- /dev/null
+++ b/.github/codeql/codeql-config.yml
@@ -0,0 +1,7 @@
+# CodeQL analysis configuration for vscode-powershell.
+# Excludes runtime-downloaded artifacts that are not part of the repository source.
+paths-ignore:
+  - .vscode-test/ # Downloaded VS Code binaries for integration testing (in .gitignore)
+  - node_modules/
+  - out/
+  - dist/