search

SonarSource / sonar-dotnet

Code analyzer for C# and VB.NET projects
https://redirect.sonarsource.com/plugins/csharp.html
GNU Lesser General Public License v3.0
798 stars 229 forks source link

NET-357 S2068 does not consider `launchSettings.json` files #9675

Open costin-zaharia-sonarsource opened 1 month ago

costin-zaharia-sonarsource commented 1 month ago

Source: https://community.sonarsource.com/t/hard-coded-passwords-in-appsettings-json-not-detected/126959/4

The launchSettings.json files are not considered by the S2068 rule. See: https://github.com/SonarSource/sonar-dotnet-enterprise/blob/master/analyzers/src/SonarAnalyzer.Core/AnalysisContext/SonarCompilationReportingContext.cs#L30

faheemred commented 3 weeks ago

Could you please provide an estimated time for resolving this GitHub issue?