From 4909d238b949809ea779e252baecfc996d31abb5 Mon Sep 17 00:00:00 2001 From: Daniel <198354403+BaconMan1168@users.noreply.github.com> Date: Tue, 15 Sep 2026 20:12:04 +0800 Subject: [PATCH] docs: list security-and-quality as a built-in CodeQL query suite Aligns the CodeQL query suites page with the workflow configuration options page, which already documents security-and-quality as a built-in suite. --- .../concepts/code-scanning/codeql/codeql-query-suites.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/content/code-security/concepts/code-scanning/codeql/codeql-query-suites.md b/content/code-security/concepts/code-scanning/codeql/codeql-query-suites.md index c63d3a4423d5..b278e806d622 100644 --- a/content/code-security/concepts/code-scanning/codeql/codeql-query-suites.md +++ b/content/code-security/concepts/code-scanning/codeql/codeql-query-suites.md @@ -24,7 +24,7 @@ You should use query suites for the queries that you want to frequently use in y ## Built-in {% data variables.product.prodname_codeql %} query suites -The built-in {% data variables.product.prodname_codeql %} query suites, `default` and `security-extended`, are created and maintained by {% data variables.product.prodname_dotcom %}. Both of these query suites are available with default setup for every {% data variables.product.prodname_codeql %}-supported language. +The built-in {% data variables.product.prodname_codeql %} query suites, `default`, `security-extended`, and `security-and-quality`, are created and maintained by {% data variables.product.prodname_dotcom %}. The `default` and `security-extended` query suites are available with default setup for every {% data variables.product.prodname_codeql %}-supported language. Organization owners and security managers can recommend a query suite for use with default setup throughout their organization. For more information, see [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools/code-scanning-at-scale). @@ -42,6 +42,11 @@ For a complete list of queries included in each query suite for every language, * Relative to the `default` query suite, the `security-extended` suite may return a greater number of false positive {% data variables.product.prodname_code_scanning %} results. * This query suite is available for use with default setup for {% data variables.product.prodname_code_scanning %}, and is referred to as the "Extended" query suite on {% data variables.product.prodname_dotcom %}. +### `security-and-quality` query suite + +* The `security-and-quality` query suite consists of all the queries in the `security-extended` query suite, plus additional queries that identify maintainability and reliability issues. +* This query suite is available for use with advanced setup for {% data variables.product.prodname_code_scanning %}. For more information, see [AUTOTITLE](/code-security/how-tos/find-and-fix-code-vulnerabilities/configure-code-scanning/configuring-advanced-setup-for-code-scanning). + ## Custom query suites To use a custom query suite, you must configure advanced setup for {% data variables.product.prodname_codeql %} {% data variables.product.prodname_code_scanning %}. For more information, see [AUTOTITLE](/code-security/how-tos/find-and-fix-code-vulnerabilities/configure-code-scanning/configuring-advanced-setup-for-code-scanning).