The static analysis guidelines contain policy statements regarding how static analysis should be applied to the source code on the project.