DevSkim icon indicating copy to clipboard operation
DevSkim copied to clipboard

Add support as Roslyn Analyzer

Open rjmurillo opened this issue 1 year ago • 3 comments

Is your feature request related to a problem? Please describe. The experience is clunky when using DevSkim. I either use the command line and output a SARIF file, then use a SARIF viewer, or use a Visual Studio or VS Code extension to integrate. This does not help me because I use JetBrains Rider.

Describe the solution you'd like What would be great if the analyzers show up as Roslyn Code analyzer so it works when I just run dotnet build without all the extra steps.

Describe alternatives you've considered

  • Creating a VS Code workspace definition with the required extensions (not everyone uses workspaces or VS Code)
  • Creating some onboarding documentation that requires contributors to configure their IDE a certain way (we have mechanisms for that, but not for extensions specifically)
  • Creating a shell script that contributors can call to analyze (the experience is clunky)
  • Hooking MSBuild so that the tooling is run from dotnet tool during regular build (the experience is also clunky)

Additional context https://github.com/rjmurillo/moq.analyzers/pull/83

rjmurillo avatar Jun 12 '24 20:06 rjmurillo