dotnet-security-guard / roslyn-security-guard

Roslyn analyzers that aim to help security audit on .NET applications.
https://dotnet-security-guard.github.io
GNU Lesser General Public License v3.0
208 stars 38 forks source link

Supress (In Source or Supressions file) does nothing #29

Closed Mattacks closed 7 years ago

Mattacks commented 7 years ago

E.G. (but not limited to) Severity Code Description Project File Line Suppression State Warning SG0001 Potential command injection with Process.Start blah C:\Projects\blah.cs 36 Active

Right clicking on the above in Visual studio and choosing either of the options does not cause any suppression to be inserted.

VS configuration info:

Microsoft Visual Studio Enterprise 2015 Version 14.0.25431.01 Update 3 Microsoft .NET Framework Version 4.6.01590

Installed Version: Enterprise

Architecture and Modeling Tools (key) Microsoft Architecture and Modeling Tools

UML® and Unified Modeling Language™ are trademarks or registered trademarks of the Object Management Group, Inc. in the United States and other countries.

Visual Basic 2015 (key) Microsoft Visual Basic 2015

Visual C# 2015 (key) Microsoft Visual C# 2015

Visual C++ 2015 (key) Microsoft Visual C++ 2015

.NET Portability Analyzer 1.1.10808.0 Evaluates portability of assemblies across .NET platforms.

Add New File 3.5 The fastest and easiest way to add new files to any project - including files that start with a dot

AnkhSVN - Subversion Support for Visual Studio 2.6.12735.14 AnkhSVN - Subversion Support for Visual Studio 2.6.12735.14

SharpSvn is linked to: Apr 1.5.1, Apr-util 1.5.4, Cyrus Sasl 2.1.26, eXpat 2.1.0, LibSSH2 1.6.0, OpenSSL 1.0.2d 9 Jul 2015, Serf 1.3.8, SQLite 3.8.11.1, Subversion 1.9.2-SharpSvn, Utf8proc 1.1.5, ZLib 1.2.8 SharpSvn is optionally linked to: Berkeley DB 4.4.20, SharpPlink 0.65.0(SharpSvn)

ASP.NET and Web Tools 2015.1 14.1.20907.0 ASP.NET and Web Tools 2015.1

ASP.NET Web Frameworks and Tools 2012.2 4.1.41102.0 For additional information, visit http://go.microsoft.com/fwlink/?LinkID=309563

ASP.NET Web Frameworks and Tools 2013 5.2.40314.0 For additional information, visit http://www.asp.net/

Azure App Service Tools v2.9.5 14.0.20810.0 Azure App Service Tools v2.9.5

Azure Data Lake Node 1.0 This package contains the Data Lake integration nodes for Server Explorer.

Azure Data Lake Tools for Visual Studio 2.1.0000.0 Microsoft Azure Data Lake Tools for Visual Studio

Bundler & Minifier 1.0.21 Adds support for bundling and minifying JavaScript, CSS and HTML files in any project.

Common Azure Tools 1.8 Provides common services for use by Azure Mobile Services and Microsoft Azure Tools.

Editor Enhancements 1.0.24 Provides additional features such as HTML and URL encodings, transformations and sorting of selected text the editor.

Fabric.ApplicationInsights 1.0 Allows user to instrument their Service Fabric projects for Application Insights.

Fabric.DiagnosticEvents 1.0 Fabric Diagnostic Events

File Icons 1.11 Adds icons for files that are not recognized by Solution Explorer

File Nesting 2.5.63 Automatically nest files based on file name and enables developers to nest and unnest any file manually

Image Optimizer 3.6.94 Uses industry standard tools to optimize any JPEG, PNG and Gifs - including animated Gifs. Can do both lossy and lossless optimization.

Image Sprites 1.4.45 Boost your website's performance by creating image sprites to reduce the amount of HTTP requests needed.

JavaScript Language Service 2.0 JavaScript Language Service

JavaScript Project System 2.0 JavaScript Project System

Markdown Editor 1.10.180 A full featured Markdown editor with live preview and syntax highligting. Supports GitHub flavored Markdown.

Microsoft .NET Core Tools (Preview 2) 14.1.20907.0 Microsoft .NET Core Tools (Preview 2)

Microsoft Azure Hive Query Language Service 2.1.0000.0 Language service for Hive query

Microsoft Azure Mobile Services Tools 1.4 Microsoft Azure Mobile Services Tools

Microsoft Azure Tools 2.9 Microsoft Azure Tools for Microsoft Visual Studio 2015 - v2.9.40923.2

NuGet Package Manager 3.5.0 NuGet Package Manager in Visual Studio. For more information about NuGet, visit http://docs.nuget.org/.

Open Command Line 2.1.177 Opens a command line at the root of the project. Support for all consoles such as CMD, PowerShell, Bash etc. Provides syntax highlighting, Intellisense and execution of .cmd and .bat files.

Package Installer 2.0.92 Makes it easier, faster and more convenient than ever to install Bower, npm, Yarn, JSPM, TSD, Typings and NuGet packages to any project

Package Security Alerts 0.5.14 Identifies npm and Bower packages that contains known security vulnerabilities to ensure your project is always using the most secure package versions.

PreEmptive Analytics Visualizer 1.2 Microsoft Visual Studio extension to visualize aggregated summaries from the PreEmptive Analytics product.

Project Reference Context Menu Extension 1.0 Adds context menu items to project reference to quickly open NuGet, Stack Overflow, etc for one or more references.

SQL Server Data Tools 14.0.61021.0 Microsoft SQL Server Data Tools

Syntax Highlighting Pack 1.8.61 Adds syntax highlighting and snippet support for a wide variety of programming languages such as Clojure, Go, Jade, Lua, Swift, Ruby and many more...

ToolWindowHostedEditor 1.0 Hosting json editor into a tool window

TypeScript 1.8.36.0 TypeScript tools for Visual Studio

Visual Studio Spell Check Everywhere VSSpellCheckEverywhere An extension that enables spell checking within any Visual Studio file editor or tool window that uses WPF text boxes. https://GitHub.com/EWSoftware/VSSpellChecker

Visual Studio Spell Checker VSSpellChecker An editor extension that checks the spelling of comments, strings, and plain text as you type or interactively with tool windows. https://GitHub.com/EWSoftware/VSSpellChecker

Web Compiler 1.11.319 Compiler for LESS, Sass and CoffeeScript files

Web Essentials 2015.3 3.0.235 Adds many useful features to Visual Studio for web developers. Requires Visual Studio 2015

Windows Installer XML Toolset 3.10.3.3007 Windows Installer XML Toolset version 3.10.3.3007 Copyright (c) .NET Foundation and contributors. All rights reserved.

Mattacks commented 7 years ago

Was due to the fact that it suppresses using a different code