security-code-scan

security-code-scan copied to clipboard

**Environment:** - Version: 5.6.3 - Installation/Running method: - [ ] Visual Studio Extension - [ ] NuGet package - [ ] Standalone tool - [ ] DotNet Core Tool from...

Cestbienmoi

ReflectionTypeLoadException on startup

2

**Environment:** - Version: 5.6.3 - Branch: - [ ] vs2019 - [ ] vs2017 - [ ] vs2015 - Installation/Running method: - [ ] Visual Studio Extension - [ ]...

kbilsted

False positive SCS0018 with DbContext inheritance

1

**Environment:** - Version: 5.6.3 - Branch: vs2019 - Installation/Running method: Visual Studio 2022 17.2.4. Also tested on Visual Studio 2019 16.11.9. - Operating System: Windows 10 **Describe the bug** I...

antoine-rosse

Issues when using on bitbucket pipeline

1

**Environment:** - Version: 5.6.2 - - Installation/Running method: - [ ] Standalone tool - [ ] DotNet Core Tool from NuGet - Operating System: - [ ] Linux **Describe the...

elfico

nuget 5.2.1 Warning CS8032

6

**Environment:** - Version: 5.2.1 - Branch: - [x] vs2019 - [ ] vs2017 - [ ] vs2015 - Installation/Running method: - [ ] Visual Studio Extension - [x] NuGet package...

denhaandrei

From https://kristhecodingunicorn.com/post/dotnet_sast_scs/ There are some limitations in the Security Code Scan tool that I've discovered while implementing it in my application that might be relevant for you to be aware...

JarLob

**Environment:** - Version: 5.2.1 - Branch: - [x] vs2019 - [ ] vs2017 - [ ] vs2015 - Installation/Running method: - [ ] Visual Studio Extension - [x] NuGet package...

mus65

**Describe the bug** It seems to me that the definitions of the issues and the descriptions are not customizable without recompiling the tool. In fact "Messages.yml" is taken from the...

wisec

**Describe the bug** First of all, thank you very much for the creation of this project! I would like to help with my contribution with the following: The project misses...

wisec

Missing dependencies in the nuget package?

4

Hi There, i just wanted to try out the security-scanner to see what it finds and if i would like to incorporate it into my CI-Pipeline. But i could not...

ghandmann