add security-severity score to code scanning query list

[felickz]

Add security-severity metadata tag to the Build code scanning query list

• Security Score calculation described in blog: CodeQL code scanning: new severity levels for security alerts
• Metadata definition for security-severity

Ex:

Sample from runs:

• code-scanning-query-list.zip (reran april 16)
• code-scanning-query-list.zip (reran April 4 2024)

[RasmusWL]

Let's look at getting this PR merged in the new year 😊

[RasmusWL]

I've suggested changes so the new "Security score" column is added as the last column. This will make it easier if any script is reading the files using positional indexing.

(I personally don't know of any, but since I don't see any cost to doing this, I think we might as well play nice)

Ohterwise LGTM 👍

[felickz]

I've suggested changes so the new "Security score" column is added as the last column. This will make it easier if any script is reading the files using positional indexing.

(I personally don't know of any, but since I don't see any cost to doing this, I think we might as well play nice)

Ohterwise LGTM 👍

Accepted and retested... looks good.

Sample from runs:

• code-scanning-query-list.zip (reran april 16)

[RasmusWL]

LGTM, thanks for making this change 👍