security-code-scan / security-code-scan

Vulnerability Patterns Detector for C# and VB.NET

https://security-code-scan.github.io

security-code-scan/security-code-scan Issues

Msbuild failed when processing the file --csproj file path -- with message: C:\Windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.WinFx.targets: (268, 9): Unknown build error, 'Object reference not set to an instance of an object.'
Updated a month ago
Security-scan4x.zip build fails due to Method not found: 'System.ReadOnlySpan`1<Char> Microsoft.IO.Path.GetFileName(System.ReadOnlySpan`1<Char>)
Updated 3 months ago1
nuget 5.2.1 Warning CS8032
Closed 4 months ago6
New exceptions thrown for SCS extension after upgrading VS
Updated 5 months ago2
VS 17.6.2 many errors started to appear for Security Code Scan 5.6.7
Updated 6 months ago3
Standalone runner not working in .NET 7 on Bitbucket pipelines
Updated 7 months ago
security-scan /your/solution.sln throws up error.
Updated 9 months ago5
security-scan' is not recognized as an internal or external command
Closed a year ago1
Upload Visual Studio Code extension to Open VSX
Closed a year ago1
Security Code Scan Standalone Tool throws Method not found: Microsoft.IO.Path.GetFileName(System.ReadOnlySpan`1)' with VS2022 17.3 MSBuild
Updated a year ago4
Analyzer 'SecurityCodeScan.Analyzers.XxeDiagnosticAnalyzerCSharp' threw an exception
Updated a year ago
SCS0012 after upgrading from net6.0 to net7.0
Updated a year ago1
Scanning an intentionally vulnerable .NET 6 project with the stand-alone runner does not yield any detection results
Updated 2 years ago11
CLI tool prefixes findings with "Found:" which is not consistent with MSBuild output format
Closed 2 years ago2
The analyzer fails to detect a vulnerability when an interface is used as declaring type
Updated 2 years ago
SCS0016 False positive for ODataController
Updated 2 years ago
Standalone tool with `.sln` don't start scanning
Closed 2 years ago
Standalone scanner throws exception: 'ProjectName' is already part of the workspace
Closed 2 years ago4
Solution Items
Closed 2 years ago
ReflectionTypeLoadException on startup
Updated 2 years ago2
Dotnet Tool doesn't like F# projects
Closed 2 years ago3
Standalone can not understand shproj.
Closed 2 years ago2
Issues when using on bitbucket pipeline
Closed 2 years ago1
Is this project maintained
Closed 2 years ago6
False positive SCS0018 with DbContext inheritance
Updated 2 years ago1
Not getting warnings with the sample project WebGoat.NET
Closed 2 years ago2
Installation issues
Closed 2 years ago1
security-scan: command not found on Ubuntu 20.04
Closed 2 years ago1
Do you want to report a vulnerability?
Closed 2 years ago
Can't add custom sanitizers to config file for DotNet Core Tool.
Closed 2 years ago1
Guna
Closed 2 years ago
Running security-code-scan on Linux docker with GitLab
Closed 2 years ago
New Release in Nuget
Closed 2 years ago1
Extension consuming all available memory
Closed 2 years ago1
Which NuGet Package for VSCode?
Closed 2 years ago2
dotnet6 support
Closed 2 years ago
Visual Studio 2022 Support
Closed 2 years ago
Results should be normalized for parsing
Closed 3 years ago8
Running security-code-scan on linux
Closed 3 years ago2
Investigate if double scanning with SCS tool can be avoided
Updated 3 years ago
How to scan netframework from the cmdline?
Closed 3 years ago1
.Net Framework 4.8 can't finde Sql Injection
Closed 3 years ago5
Insecure Cookie not reported with AppendCookie/SetCookie
Updated 3 years ago
Add new issues and customizable content without recompiling
Updated 3 years ago
Missing full documentation on YAML rules
Updated 3 years ago
SecurityCodeScan.exe process never finish
Closed 3 years ago5
Document Config File Version Increment
Closed 3 years ago1
Update YamlDotNet
Closed 3 years ago4
Raise a warning on detection of usage of insecure configuration options
Closed 3 years ago3
ResolveComReference error not continuing Security Code Scan
Closed 3 years ago1