Trying for a sample POC to create a analyzer for checking sessionState mode. Below steps followed following the RoslynSecurityScan github project.
Create Analyzer Extension project using VS2017
Added WebConfigAnalzyer and required Local Utils Taint related classes.
The nupkg and dll gets built
4, When I use these 2 with roslyngenerator.exe to build jar file
DEBUG] Using version marked as latest.
Version was not specified. Using version 1.0.0.
[NuGet] 'PRRST.WebConfigAnalyzer 1.0.0' already installed.
[DEBUG] Resolving dependencies for PRRST.WebConfigAnalyzer version 1.0.0...
Looking for analyzers in the package...
[DEBUG] Looking for C# analyzers
[DEBUG] Adding AssemblyResolver to current AppDomain assembly resolution.
Loaded assembly: PRRST.WebConfigAnalyzer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
Could not instantiate analyzers from 'WebConfigAnalyzer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'.
Error: Exception has been thrown by the target of an invocation.
[DEBUG] Removed AssemblyResolver from current AppDomain assembly resolution.
[WARNING] No analyzers were found in package:WebConfigAnalyzer
[WARNING] Re-run this generator with /recurse if plugins should be generated for the dependencies of this package.
It has dependeny of YamlResource dll which is added as reference. and also placed where SDK folder with the project dll while generating jar.
Trying for a sample POC to create a analyzer for checking sessionState mode. Below steps followed following the RoslynSecurityScan github project.
Create Analyzer Extension project using VS2017 Added WebConfigAnalzyer and required Local Utils Taint related classes. The nupkg and dll gets built 4, When I use these 2 with roslyngenerator.exe to build jar file DEBUG] Using version marked as latest. Version was not specified. Using version 1.0.0. [NuGet] 'PRRST.WebConfigAnalyzer 1.0.0' already installed. [DEBUG] Resolving dependencies for PRRST.WebConfigAnalyzer version 1.0.0... Looking for analyzers in the package... [DEBUG] Looking for C# analyzers [DEBUG] Adding AssemblyResolver to current AppDomain assembly resolution. Loaded assembly: PRRST.WebConfigAnalyzer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null Could not instantiate analyzers from 'WebConfigAnalyzer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'. Error: Exception has been thrown by the target of an invocation. [DEBUG] Removed AssemblyResolver from current AppDomain assembly resolution. [WARNING] No analyzers were found in package:WebConfigAnalyzer [WARNING] Re-run this generator with /recurse if plugins should be generated for the dependencies of this package.
It has dependeny of YamlResource dll which is added as reference. and also placed where SDK folder with the project dll while generating jar.
Kindly let me know what could be the issue