Gabe Stocco

Currently the tests primarily check that the correct number of files are returned from extraction commands. However, as the issue identified in #102 shows this can be insufficient in cases...

**Is your feature request related to a problem? Please describe.** GitHub Code Scanning Recognizes a `security-severity` value to specify a CWE value for a finding. DevSkim doesn't have these values...

Support Suppressions for file types without comments

1

**Is your feature request related to a problem? Please describe.** Some file types (in particular JSON) do not support comments and so it is not feasible to include suppressions directly...

**Describe the bug** When running the suppress command in the CLI on a finding in an XML document the suppression is added but the required comment block (``) around it...

**Is your feature request related to a problem? Please describe.** As reported in #565 some users prefer not to have the .NET Install Tool for Authors obtain the .NET Runtime...

Add Scan All Workspace Files Command to DevSkim VS Code

4

**Is your feature request related to a problem? Please describe.** Previous versions of the DevSkim VS Code Extension had a palette command to trigger a scan of all files in...

Testing DevSkim Action

1

Test PR. Do not merge.

The Rules verifier currently does not verify that devskim fixes are correct, this should be added.

**Is your feature request related to a problem? Please describe.** The DevSkim rule format supports a confidence level as well as a Severity. The default rules do not have confidence...