Skip to content

Rule Tags & Filtering

Rule Tags and Categories allow you to create a custom taxonomy for your code issues. Instead of relying only on default "Bugs" or "Vulnerabilities," you can organize issues by Team, Compliance Standards (e.g., OWASP), or Internal Priorities.

1. Defining Your Taxonomy

Before you can filter issues, you must define the "Buckets" (Categories) and the "Labels" (Tags).

Step 1: Create a Category

Categories act as the parent group for your tags.

  1. Navigate to Admin > Rule Tags & Categories.
  2. In the Categories tab, click Add Category.
  3. Enter a Category Name (e.g., Security Compliance) and click Save.

Tags are the specific labels nested within a category.

  1. In the Tags tab, click + Tag.
  2. Select a Tag Name (e.g., OWASP) and assign it to a Category.
  3. Click Add Tag.

2. Filtering Issues by Tags

This is where the taxonomy provides value. You can now drill down into specific subsets of data in the Issue Explorer.

Steps to Filter:

  1. Navigate to your Repository Dashboard and open the Issue Explorer.
  2. Locate the Filter Sidebar on the left.
  3. Find the Tags dropdown.
  4. Select your custom tag (e.g., OWASP).
  5. Result: The UI will refresh to show only the issues mapped to that specific compliance tag.

Additional Filtering Options

  • Filter by Tag Category: Filter by an entire Tag Category (e.g., CVE, GHSA) to see all related issues without selecting individual tags.
  • Filter by Individual Tag: Filter by a specific tag for granular results.
  • Global Scope: Tag Category configuration is global. Issues across all repositories with matching tags are mapped automatically.

Practical Examples

Use CaseCategory NameTag Examples
Team OwnershipSquadsFrontend, Backend, DevOps
ComplianceRegulatoryHIPAA, PCI-DSS, SOC2
Legacy CodeTechnical DebtDeprecation, Performance-Risk