As I understand it, the goal is to bucket together runs of the same type, so that a result management system can: Open a SARIF log file, Find run.stableId , Find the most recent run of the same type , and Copy run.id from the earlier run into run.baselineId of the current run. That doesn’t require namespaced tags. It works whether run.stableId contains "Nightly security tools run/x64 release optimized" or whether it contains "Nightly security tools run x64 release optimized" . The only reason you’d need namespacing is if there’s some other scenario that needs to bucket together every "Nightly security tools run" , regardless of the build configuration. Larry