The version of the tool used to generate the code scanning analysis.

Identifies the configuration under which the analysis was executed. For example, in GitHub Actions this includes the workflow filename and job name.

Identifies the variable values associated with the environment in which the analysis that generated this alert instance was performed, such as the language that was analyzed.

Identifies the configuration under which the analysis was executed. Used to distinguish between multiple analyses for the same tool and commit, but performed on different languages or different parts of the code.