Tagged static-code-analysis