Skip to content

Commit cd7f865

Browse files
Document security-and-quality as a built-in CodeQL query suite (#45902)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
1 parent 05ff99a commit cd7f865

1 file changed

Lines changed: 6 additions & 1 deletion

File tree

content/code-security/concepts/code-scanning/codeql/codeql-query-suites.md

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ You should use query suites for the queries that you want to frequently use in y
2424

2525
## Built-in {% data variables.product.prodname_codeql %} query suites
2626

27-
The built-in {% data variables.product.prodname_codeql %} query suites, `default` and `security-extended`, are created and maintained by {% data variables.product.prodname_dotcom %}. Both of these query suites are available with default setup for every {% data variables.product.prodname_codeql %}-supported language.
27+
The built-in {% data variables.product.prodname_codeql %} query suites, `default`, `security-extended`, and `security-and-quality`, are created and maintained by {% data variables.product.prodname_dotcom %}. The `default` and `security-extended` query suites are available with default setup for every {% data variables.product.prodname_codeql %}-supported language.
2828

2929
Organization owners and security managers can recommend a query suite for use with default setup throughout their organization. For more information, see [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools/code-scanning-at-scale).
3030

@@ -42,6 +42,11 @@ For a complete list of queries included in each query suite for every language,
4242
* Relative to the `default` query suite, the `security-extended` suite may return a greater number of false positive {% data variables.product.prodname_code_scanning %} results.
4343
* This query suite is available for use with default setup for {% data variables.product.prodname_code_scanning %}, and is referred to as the "Extended" query suite on {% data variables.product.prodname_dotcom %}.
4444

45+
### `security-and-quality` query suite
46+
47+
* The `security-and-quality` query suite consists of all the queries in the `security-extended` query suite, plus additional queries that identify maintainability and reliability issues.
48+
* This query suite is available for use with advanced setup for {% data variables.product.prodname_code_scanning %}. For more information, see [AUTOTITLE](/code-security/how-tos/find-and-fix-code-vulnerabilities/configure-code-scanning/configuring-advanced-setup-for-code-scanning).
49+
4550
## Custom query suites
4651

4752
To use a custom query suite, you must configure advanced setup for {% data variables.product.prodname_codeql %} {% data variables.product.prodname_code_scanning %}. For more information, see [AUTOTITLE](/code-security/how-tos/find-and-fix-code-vulnerabilities/configure-code-scanning/configuring-advanced-setup-for-code-scanning).

0 commit comments

Comments
 (0)