Fix codescanning alerts

java/ql/src/Security/CWE/CWE-730/PolynomialReDoS.ql

@@ -4,6 +4,7 @@
  *              to match may be vulnerable to denial-of-service attacks.
  * @kind path-problem
  * @problem.severity warning
+ * @security-severity 7.5
  * @precision high
  * @id java/polynomial-redos
  * @tags security

java/ql/src/Security/CWE/CWE-730/ReDoS.ql

@@ -5,6 +5,7 @@
  *              attacks.
  * @kind problem
  * @problem.severity error
+ * @security-severity 7.5
  * @precision high
  * @id java/redos
  * @tags security

java/ql/test/query-tests/security/CWE-730/PolynomialReDoS.ql

@@ -5,7 +5,7 @@ import semmle.code.java.security.performance.PolynomialReDoSQuery
 class HasPolyRedos extends InlineExpectationsTest {
   HasPolyRedos() { this = "HasPolyRedos" }
 
-  override string getARelevantTag() { result = ["hasPolyRedos"] }
+  override string getARelevantTag() { result = "hasPolyRedos" }
 
   override predicate hasActualResult(Location location, string element, string tag, string value) {
     tag = "hasPolyRedos" and