From 5e6e176f325391586f96644f33c6959c27cb8065 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Thu, 29 Jul 2021 17:53:31 +0100 Subject: [PATCH] Update query-metadata-style-guide.md Add a note about the `@security-severity` tag. --- docs/query-metadata-style-guide.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/query-metadata-style-guide.md b/docs/query-metadata-style-guide.md index 1311a808e3a..ddfe56aad9a 100644 --- a/docs/query-metadata-style-guide.md +++ b/docs/query-metadata-style-guide.md @@ -157,6 +157,8 @@ If your query is a security query, use one or more `@tags` to associate it with When you tag a query like this, the associated CWE pages from [MITRE.org](http://cwe.mitre.org/index.html) will automatically appear in the reference section of its associated qhelp file. +Maintainers are expected to add a `@security-severity` tag to security relevant queries that will be run on Code Scanning. There is a documented internal process for generating these `@security-severity` values. + ## QL area ### Alert messages