This work comes from GitHub's Security Lab https://securitylab.github.com/

A little surprising that hasn't been shifted into MSRC, but GitHub operates very independently inside Microsoft.

While not trivial because it is not documented, you can create your a database with your own facts. Some of the extractors that create the required files are open source https://github.com/github/codeql/blob/main/ruby/extractor/sr...

Another open-source project supporting, among others, previous iterations of MISRA C++ through CodeQL queries is https://github.com/github/codeql-coding-standards

I asked for the TAOCP when I graduated.