# kilocode_change - new file
name: Critical-only CodeQL config

query-filters:
  - include:
      kind:
        - problem
        - path-problem
        - alert
        - path-alert
      tags contain: security
      security-severity: /^(9(\.[0-9])?|10(\.0)?)$/